Identity, AI Agents, and the Human Side of Security

Show Summary

Who is behind an identity in a cloud system, and what happens after that identity gets access? On Intelligent Access, host John Dillard talks with Tina Velez about tracing activity across human accounts, service accounts, and third parties. Tina explains why an account's usual behavior matters as much as its permissions. She draws a parallel between cloud security and a visitor using a badge in a building. They also discuss how employees building with AI create new complexities for security teams. Tina argues that models can help people work faster, but leadership still depends on judgment, listening, and clear communication. For security leaders, the conversation connects technical visibility with the human work of explaining risk.

Key takeaways

• An identity-based view links activity to the person, service account, or third party behind it, then looks for departures from usual behavior.
• A valid badge or account does not answer every security question. Changes in where an identity goes or what it does can add important context.
• When employees use AI to build new tools, security teams may face more architecture reviews and questions about production access.
• AI can help with analysis and drafting, but Tina does not expect it to replace the human work of leading teams.
• Security leaders need to explain the impact and trade-offs behind a risk, not hand stakeholders a long list of technical findings.

Quotes

"Everybody can build now, but you could still be building with no idea of what you're asking for."

"There's still a huge element of people and process that is involved in getting to any type of outcome that you're looking to do."

This episode is brought to you by Sign In App. Subscribe, leave a review, and share the episode with your network. For more on security, compliance, and workplace experiences, visit signinapp.com.