Session
The State of AI Risk Management report is here.
Download a copy
About the session
As enterprises move from experimenting with AI agents to deploying them in real workflows, security teams are facing a new set of questions: What should agents be allowed to do? How do we govern permissions and blast radius? How do we detect shadow agents? Which frameworks are useful, and where are the gaps?
Over the past several months, the PBC AI Center of Excellence | Building Secure AI Agents cohort has been discussing these questions through practitioner-led working sessions. This virtual session will share key lessons, open questions, and real-world approaches from the cohort, including early insights from the upcoming Securing AI Agents in the Enterprise: A Practitioner’s Guide.
This panel covers:
- Key security considerations for enterprise AI agents
- How practitioners are thinking about agent tasks, delegation, and permissions
- The current landscape of AI security frameworks and where they help
- Cost, governance, and operational trade-offs teams are working through
- Open questions the community is still exploring around agentic AI security
Hosted By
Members of The Purple Book Community AI Center of Excellence -
- Anisha - Governing agent usage
- Bill - Deterministic vs. non-deterministic scanners
- Sanket - Frameworks section
- Mohit - Prompt injection by design
- Cameron - Deployment patterns / tentative
- Shivageeta - Cost-related section / tentative
- Vikrant - Agentic identity and authorization / to confirm
- Nevada - Reviewing and open to contributing
- Matt Sayar - Enterprise agent visibility / Raj to confirm
.webp)
Uniting security professionals on a mission to democratize software security and solve its ever-evolving challenges with the power of Community.
.svg)
.svg)
The information contained in The Purple Book of Software Security and the contents of the Purple Book Community website contain ideas expressed by Purple Book Community members. These opinions are their own, do not reflect the views of the organizations they belong to, and have no affiliation with nor make any endorsement of any commercial products or services, including those of community sponsors.