Skip to contentAgentic IAM Day 2026 (opens in a new tab)
PlainID
Get a demo

Authorization, written down.

Field notes, best practices and market reading from the team building identity-first authorization for the enterprise.

Nov 9, 2026

Why Static Access Checks Are Not Enough for Zero Trust Access Control

At 9:02 on a Monday, a claims analyst at a mid-size insurer signs in. She passes MFA on a managed laptop with a clean posture score, connects through the company’s ZTNA gateway, and opens the claims platform. Her role grants read access to the claims database, as it has since she joined three years ago. At 2:15 that afternoon, her session token is stolen through a malicious browser extension, and over the next forty minutes the attacker pulls 38,000 claim records, complete with medical codes and bank details.

Hila Shitrit Nissim

Nov 9, 2026

Externalized Authorization Management Explained

Your payments team has a feature ready for Thursday. On Tuesday, compliance sends a new rule: relationship managers in Frankfurt can view EU-booked corporate accounts, but lose visibility into US-booked accounts under an open regulatory hold. Your lead engineer searches the codebase and finds the account-visibility check written eleven different ways across nine services, in Java, Python, and a stored procedure. One was written by a contractor who left in 2023. Thursday becomes next sprint, because the regression suite for the account service takes six hours and fails whenever anyone touches entitlements.

Hila Shitrit Nissim

Nov 9, 2026

The OCC's Super Intelligence Framework: Control That Scales With Consequence

Can you prove who or what can access sensitive systems, execute transactions, and retrieve customer records, across both human and non-human identities, at the exact millisecond an action occurs?

Michael Anastasio

Updates

Sign up for updates

Get the latest news on identity, access management, and policy enforcement directly to your inbox.

Nov 3, 2026

The CSBS AI Supervisory Framework: Turning AI Governance Into Controls Examiners Can Test

On September 16, 2026, the Conference of State Bank Supervisors released its Artificial Intelligence Supervisory Framework. While discretionary, it establishes a standardized baseline for how examiners evaluate AI deployment, assess risk and escalate edge cases for deeper scrutiny.

Michael Anastasio

Oct 20, 2026

XACML, OPA, and PBAC: How to Modernize Legacy Authorization Without Rebuilding Everything

A regional bank gets a request from its regulator during a routine examination. The examiner wants every customer account a specific relationship manager could view during March, across both the loan origination system and the new mobile banking API. The loan system makes its access decisions through a XACML policy decision point the bank deployed in 2014. The mobile API runs on Kubernetes, and the platform team protects it with Open Policy Agent sidecars running Rego policies they wrote two years ago.

Kobi Gol

Oct 20, 2026

AI Agent Identity Governance: How to Control Agents Before They Touch Sensitive Data

A procurement team at a mid-sized insurer builds a contract assistant during a two-day hackathon. The engineer registers it in Entra ID as an app registration and grants it read access across the company’s SharePoint sites so it can find vendor agreements. He lists himself as the owner. The assistant works well enough that buyers start using it every day. Four months later, a junior buyer asks it to summarize recent agreements with a logistics vendor. The response includes terms from a draft acquisition agreement stored on the corporate development team’s site. Nobody in corporate development knew the assistant existed. The engineer who built it had moved to the data platform team in month two. The quarterly access review certified the app registration twice, because the reviewer saw a familiar app name and a valid owner field and clicked approve.

Hila Shitrit Nissim

Oct 15, 2026

Non-Human Identities Are Multiplying. How Do You Keep Machine Access Under Control?

At 6:40 on a Friday evening, your secret scanner flags an API key committed to a public GitHub repository. The key belongs to inventory-sync, a service that reconciles stock levels between your warehouse system and your e-commerce platform. Rotating the key takes your on-call engineer four minutes. Answering the next question takes the rest of the weekend: what could someone holding that key have reached during the nine hours it sat in public? The service account behind it turns out to carry read-write access to four production databases, plus a grant to the payments API that a contractor added during an integration project two years ago. The contractor is gone. The engineer who built the service moved to another team. Nobody can say which of those permissions inventory-sync still uses.

Greg Berg

Oct 15, 2026

How to Build an AI Agent Permission Control Framework Security Teams Can Actually Audit

Your internal audit team sends a request on a Tuesday morning. They want a list of every customer record the claims-processing agent read last quarter, which adjuster the agent was working for on each read, and the policy that allowed it. You have the agent’s logs from the LLM gateway, request logs from the API gateway, and query logs from the claims database, and none of them share an identifier. The agent ran under a service account called svc-claims-ai, so the database shows one identity making forty thousand queries. Nothing in any of the three systems records why a given query was permitted. Three engineers spend two weeks rebuilding a partial answer, and the auditor marks the control as ineffective anyway.

Rakesh Chowtee

Oct 9, 2026

Operationalizing Zero Trust: How Runtime Authorization Fulfills NIST SP 800-207 & SP 800-207A

NIST SP 800-207 defines Zero Trust Architecture as a shift away from implicit trust based on network perimeters toward explicit, dynamic access decisions for every enterprise resource. While authentication establishes what identity is at the front door, authorization determines what that identity is permitted to access, do, and expose at the moment execution occurs.

Gal Helemski

Oct 6, 2026

Best AI Authorization Tools and Software in 2026: A Buyer's Guide

Your team already runs an identity provider. It checks who logs in. But once an AI agent acts on a prompt, retrieves data, calls tools, and returns an answer on a user's behalf, "who are you" is no longer the hard question. The hard question becomes what that agent can do right now, in this exact context.

Tal Agam

Oct 6, 2026

PlainID and the OWASP Top 10 for Agentic Applications (2026)

The OWASP Top 10 for Agentic Applications is OWASP's risk list for AI agents that take action. It covers software that plans toward a goal, holds memory across steps, calls tools and APIs, coordinates with other agents, and acts with delegated authority. It extends the LLM Top 10 rather than replacing it, because most agent systems are also LLM applications and inherit those model-layer risks. For CISOs, identity architects, and the AI platform owners now running agents in production, the list is a practical map of where autonomous access can go wrong.

Gal Helemski

Oct 6, 2026

How PlainID Tackles the OWASP Top 10 Vulnerabilities for LLM Applications

The OWASP Top 10 for LLM Applications is the reference list security teams use to reason about how AI applications fail. It names the risks that surface when an enterprise puts a large language model in front of sensitive data and business systems.

Gal Helemski

Secure Every Identity.
Go Beyond Who Gets In.

Centralize your policy governance while distributing runtime enforcement across applications, APIs, data platforms, and agentic AI workflows.

Get a demo