InfoSecurity2025-08-05
SECURITY: NIST Calls for Action-Based Controls Around AI-Agent Tools
NIST highlighted the absence of a consistent taxonomy for the tools and capabilities available to AI agents.
Supply Chain organizations should document agent capabilities and limitations before allowing interaction with planning, procurement or execution systems.
More details are available in the NIST analysis.
The Dataleo angle
Permissions should be defined by action and consequence, with explicit controls for recommendation, modification and execution.