JIT Access

Just-in-time (JIT) access is a security practice where users are granted temporary, elevated permissions only when needed to perform specific tasks, rather than maintaining standing access to sensitive systems or data. This approach significantly reduces the attack surface and helps organizations comply with governance frameworks like SOC 2 and ISO 27001 that require least-privilege access controls. JIT access is critical for AI governance because it limits exposure of model training data, inference pipelines, and production systems to only authorized personnel during necessary operations.

1 item

Corporate PolicyGlobal2026-08-18

Standing Agent Credentials Are Now a Material Control Gap

A practitioner analysis published in The Hacker News argues that AI agents should never hold persistent credentials and should instead receive just-in-time, task-scoped access mediated by a dedicated gateway. The guidance identifies standing credentials and overly broad API access as the primary attack surface in enterprise agentic deployments. It offers a least-privilege architecture model that compliance teams can use to evaluate their current agent identity controls.

agentic AI least-privilege JIT access credential management non-human identity API governance agent security