Posts by Ozair Malik

Traditional software fails by producing the wrong answer. An AI agent fails by taking the wrong action. And, by the time anyone notices, the records are deleted, the permissions are revoked, and the change is live in production. Read more

By the time a security team sits down to write its shadow AI policy, the problem is already months old. Dozens of unsanctioned AI tools are usually in use across the organization, and most of them are invisible to IT. The people using them aren't being reckless. They're trying to hit deadlines, and the approved path is slower than the browser tab that’s already open in front of them. Read more

A non-human identity (NHI) is any digital identity that belongs to software rather than a person. These are the automated actors in your environment, the service accounts, workloads, RPA bots, CI/CD pipelines, and AI agents that authenticate and take action without a human driving each step. Each one relies on credentials such as API keys, tokens, certificates, or passwords to prove who it is, and any actor can use any of these credential types. Read more

If you own data protection or compliance, you've likely already fielded the question: How aligned are we with the NIST AI Risk Management Framework? Read more

Agentic AI security is the set of policies, controls, and data protection strategies that govern how autonomous AI agents access, process, and act on sensitive business data. It's a fast-emerging discipline, and one most organizations haven't caught up with yet. Read more

The HIPAA Security Rule sets national HIPAA security standards for protecting the confidentiality, integrity, and availability of ePHI. The Health Insurance Portability and Accountability Act (HIPAA) was enacted in 1996. The HIPAA Security Rule was finalized in 2003, with compliance required by 2005, and it has continued to evolve alongside the shift from paper to digital records. As a direct result of record-setting cyberattacks in the healthcare industry in 2023 and 2024, the Office for Civil Rights (OCR) at the Department of Health and Human Services (HHS) published a Notice of Proposed Rulemaking (NPRM) in January 2025 to modify the HIPAA Security Rule in order to strengthen cybersecurity protections for ePHI. Read more