When an AI Agent Is the Incident, the Identity Record Is the Evidence

A new joint guide from NIST, CISA, and NSA treats runaway AI agents as security incidents that organizations should rehearse. The guidance stresses that the hardest part of response is determining whose authority the agent acted under, and that this answer must be established before an incident occurs. The guide aims to help organizations prepare for AI-related security events.