Most organizations think of shadow AI as simply employees pasting sensitive data into a chatbot or using a personal subscription in place of a corporate one. However, that is the least dangerous version of shadow AI. The more pressing issue is agentic: copilots, autonomous agents, and the skills, plugins, hooks, and extensions that power them. They are often deployed by well-meaning teams, invisible to security, and given access to organizational knowledge that nobody explicitly scoped.
Nearly every piece of that footprint is a third-party component, making shadow AI a supply chain problem as well. Unvetted code and models can execute with an agent’s permissions, while adversaries are increasingly using AI to find and exploit these gaps. We are told that agentic AI is the solution—but is it also part of the problem?
Why Join?
- Hear a candid, slide-free conversation with SANS Certified Instructor Matt Bromiley and Knostic co-founder Sounil Yu.
- Understand how shadow AI, AI-fueled supply chain risk, and agentic AI governance intersect.
- Learn why agentic AI governance provides the foundation for addressing shadow AI and supply chain risk.
- Gain a practical approach to discovering your organization’s true AI footprint.
- Explore how to define what agents should be allowed to know and do—and prevent them from going rogue.
- Earn 1 CPE credit.
