Zero-Trust for Agentic AI – Identity, Policy and Control for Non-Human Actors
Agentic AI systems are useless without provable identity, least-privilege authorization, and strong supervision for non-human actors. This session builds directly on board use cases calling for Zero-Trust identity frameworks for agentic AI in Tier-1/Tier-2 operations, extending those concepts into a full enterprise security model.
Key Questions: – How do you assign and manage identity, credentials, and posture for agents that can provision, patch, and reconfigure networks, applications, and data pipelines? – What does capability-scoped, time-boxed authorization look like in practice for AI tools and agents? – How do we create signed, auditable action trails that satisfy internal audit and regulators for “who/what acted, when, and with what policy”? – How do you integrate agent identity into existing Zero-Trust and privileged access strategies?
Takeaways: – A practical pattern for a Zero-Trust identity framework for agentic AI across network, cloud, and ITSM stacks. – Controls and dashboards that make agent actions observable, provable, and reversible.
Roy Chua is founder and principal at AvidThink, an independent research and advisory service formed in 2018 out of SDxCentral’s research arm. Roy was previously co-founder at SDxCentral where he ran both the research and product teams. Roy was formerly a management consultant working with both Fortune 500 and startup technology companies on go-to-market and product consulting. As an early proponent of the software-defined infrastructure movement, Roy is a frequent speaker at events in the telco and cloud space and a regular contributor to leading technology publications. A graduate of UC Berkeley’s electrical engineering and computer science program and MIT’s Sloan School of Business, Roy has 20+ years of experience in telco and enterprise cloud computing, networking and security, including founding several Silicon Valley startups.
Christopher Moretti has been an executive leader with Evernorth Health Services (formerly Cigna) since October, 2015 and is currently responsible for all infrastructure engineering Leading the Global Engineering & Infrastructure Services. In this role, Chris provides executive leadership over the teams that deliver Cigna’s voice & data networks, security engineering, contact center, database, compute, storage, information management, mainframe, cloud & devops.
Previous to Cigna, Chris spent 14 years at General Electric and its subsidiaries in various executive leadership roles supporting its insurance, consumer and commercial banking businesses. While at GE, Chris attended and graduated many of their prestigious management training classes including AIMC and EIMP. Most recently, Christopher was Managing Director of Global Networks for J.P. Morgan Chase & Company based in midtown Manhattan.
Chris started his career in IT performing many different hands on technical roles in client/server, network and security for various sized firms in the greater New York market including a period where he consulted for Greenwich Technology Partners.
Chris earned a bachelor’s degree in economics from the University of Connecticut and currently resides in Shelton, CT with his wife and 3 sons.
A senior level Cyber Security Advisor with 20 years of experience in Network Engineering and 15 years of experience in Network Security. Currently focused on applying the principles of Zero Trust to the FedEx network including micro segmentation, ZTNA, and AISecOps design and architecture as FedEx undergoes digital transformation.
I currently hold active ISC2 CISSP and GIAC GSEC certifications and have been a guest speaker on network and cloud security at various conferences including Proofpoint Connect, VMworld, and Future:NET.
Engineer, entrepreneur, executive. I love solving big complex problems. Vision, strategy, culture, hiring, product, engineering, marketing, sales, finance, operations: I’ve worn every hat up until I could hire someone better than me. And there is always someone better. I am a generalist at heart.
Since returning to Cisco, I’ve been leading vision and strategy for our identity portfolio and I’m excited to be driving thought leadership on identity-first security.
Previously, I was the Founder & CEO of Oort. I started Oort to tackle the massive challenge of fixing enterprise security starting from first principles. For Oort, that meant starting with identity. Modern companies are surrounded by a swirling mass of identities – not unlike the swirling Oort Cloud of comets ☄️ and asteroids that surround our solar system. With just a slight change in trajectory, any one of these orbiting identities can be sent on a collision course with Earth. Account takeover and identity-based cyber attacks pose the greatest threat to the modern enterprise.
Prior to starting Oort, I led the Boston Innovation Team for Cisco after years of working my way across multiple product teams and technologies. I’ve touched everything from Cloud to Networking to Video Streaming to Security.
