Posts by Ozair Malik

By the time a security team sits down to write its shadow AI policy, the problem is already months old. Dozens of unsanctioned AI tools are usually in use across the organization, and most of them are invisible to IT. The people using them aren't being reckless. They're trying to hit deadlines, and the approved path is slower than the browser tab that’s already open in front of them. Read more

A non-human identity (NHI) is any digital identity that belongs to software rather than a person. These are the automated actors in your environment, the service accounts, workloads, RPA bots, CI/CD pipelines, and AI agents that authenticate and take action without a human driving each step. Each one relies on credentials such as API keys, tokens, certificates, or passwords to prove who it is, and any actor can use any of these credential types. Read more

If you own data protection or compliance, you've likely already fielded the question: How aligned are we with the NIST AI Risk Management Framework? Read more

Agentic AI security is the set of policies, controls, and data protection strategies that govern how autonomous AI agents access, process, and act on sensitive business data. It's a fast-emerging discipline, and one most organizations haven't caught up with yet. Read more