Agentic AI Identity Is Now a Board-Level Risk: RSA Launches Agent ID for Regulated Industries

AI agents are moving into production faster than security teams can track them. For organizations in finance, government, and critical infrastructure, that is becoming a regulatory and operational liability. RSA launched RSA Agent ID at The AI Conference in San Francisco on September 29 to address this growing gap.

The product announcement arrives with a notable backdrop: Gartner named agentic AI oversight its top cybersecurity trend for 2026. IBM found that incidents involving "shadow AI" (unauthorized or unregistered AI agents) cost an average of $670,000 more than standard security incidents.

Key Takeaways

• The scale problem is growing fast. By 2028, Gartner expects a typical Global Fortune 500 company to run approximately 150,000 AI agents, up from fewer than 15 in 2025. Only 13% of organizations currently believe they have adequate agent governance in place.
• The regulatory pressure is already here. U.S. federal agencies introduced 59 AI-related regulations in 2024, more than double the prior year. Regulators are already asking organizations to identify who owns each agent and how its access is reviewed.
• RSA Agent ID addresses three core problems: discovering and registering agents that are already running in an environment, proving the authority behind every consequential action an agent takes, and allowing deployment in cloud, hybrid, or on-premises environments based on the organization's sovereignty requirements.
• The product runs an AI/MCP Gateway that processes policy decisions inside the customer's own environment when self-hosted, rather than routing decisions through an external vendor cloud. That sovereignty posture differentiates it from most current agentic security offerings.

Full Article on Yahoo Finance