> ## Content Index
> Fetch the complete content index at: https://www.ai-360.online/llms.txt
> Use this file to discover other available public pages before exploring further.

# IBM puts identity, least privilege and a kill switch at the centre of agent governance
- URL: https://www.ai-360.online/ibm-puts-identity-least-privilege-and-a-kill-switch-at-the-centre-of-agent-governance/
- Published: 2026-10-28T06:32:00.000Z
- Updated: 2026-10-30T09:56:35.000Z
- Description: New IBM and HashiCorp capabilities aim to discover agents across major clouds, constrain credentials and stop unsafe activity before deployment scales further.
- Author: AI-360
- Tags: 2. Fraud & Identity, 2. Security, news

IBM has [introduced a control layer](https://newsroom.ibm.com/2026-10-27-ibm-introduces-identity-and-control-for-ai-agents%2C-securing-frontier-intelligence-for-the-enterprise?ref=ai-360.online) for enterprise agents that combines discovery, verified identity, credential restrictions, testing and shutdown controls. HashiCorp Vault’s Agent Identity is designed to give each agent a governed identity and enforce least-privilege access, including real-time credential revocation. IBM watsonx Orchestrate is being extended to discover agents built on Amazon Bedrock, Microsoft Foundry and Google Gemini.

The company says discovery and containment are initially available as technology previews. The containment capability runs agents in isolated sandboxes and includes a kill switch, while evaluation tools test quality, accuracy and compliance before deployment and monitor production behaviour and cost. IBM also says the discovery layer can locate models and Model Context Protocol servers, broadening the inventory beyond conventional applications.

The announcement is useful because it frames agent governance as an identity and authority problem, not only a model-safety problem. A registry can show that an agent exists, but it cannot determine whether the agent should be allowed to retrieve a customer record, invoke a payment tool or pass credentials to another process. That requires policy outside the model, strong ownership and an auditable chain from identity to action. Enterprises assessing the tooling should verify how the previews handle false discovery, revocation latency and evidence retention across third-party platforms.

---

[AI for Leaders: Governance, Risk & Why Strategy Must Come FirstIs your organisation adopting AI without a defined strategy or governance? If so, you're not alone — and the consequences range from data breaches to reputational damage to safeguarding failures. AI is a strategic risk, not a silver bullet, and definitely not a magic data fairy. Without clear ownership, rules, and accountability, AI can proliferate across your organisation in ways that cost more — in time, money, and trust — than not using it at all. Speakers: Craig Clark, Director at Clark & Company Information Governance Services, and Stewart Tinson, Project Director, AI-360\. You'll learn: Why "understand your why" must precede any AI rollout Which risks senior leaders most commonly overlook — from data leakage to safeguarding How to measure AI value through outcomes, not adoption metrics Why accountability for AI governance sits with the C-suite, not IT or compliance Key topics: AI strategy • Risk appetite • Data protection • Bias & fairness • Safeguarding • AI literacy • Governance models • Return on investment • Executive accountability • AI use case tiering For CISOs, CIOs, and senior leaders who need to govern AI responsibly — before it governs them.![](https://storage.ghost.io/c/b5/36/b536821c-5870-4f52-b9ef-106719725971/content/images/icon/favicon-8c49c240-256c-441a-8ae9-2824164c00f8.ico)BrightTALK![](https://storage.ghost.io/c/b5/36/b536821c-5870-4f52-b9ef-106719725971/content/images/thumbnail/image_1090002-c25105c4-5b95-4f0d-9394-1a58d4f62c45.png)](https://www.brighttalk.com/webcast/21039/663360?ref=ai-360.online)