[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZUXStdOZbuYH6jQ8i_7u6UFz2vM76bPmTT1H12HG8Jk":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"527cb3e4-3987-4ed3-ae24-d3a2d8feb525","Who collects the keys when an AI agent retires?","who-collects-the-keys-when-an-ai-agent-retires-4045c1","Think about the last time a good engineer left your company. Someone collected the laptop and the badge. IT revoked their logins before the end of the day. Their manager reassigned the open tickets, and HR filed their records somewhere they’ll stay for years, in case anyone ever challenges a decision they made. Now think about the last time an AI agent left. Someone probably deleted it from the dashboard. I’ve started describing agents as … More → The post Who collects the keys when an AI agent retires? appeared first on Help Net Security.","The article highlights the critical need for formal offboarding procedures for AI agents, drawing parallels to human employee departures. Unlike human employees who undergo a structured exit process involving IT, HR, and manager involvement, AI agents are often simply deleted from dashboards, leaving behind unmanaged credentials, ongoing tasks, and decision-making records. This lack of proper offboarding poses risks, including lingering access, unmanaged work queues, and challenges in auditing past AI-driven decisions.","AI agents require formal offboarding processes similar to human employees to manage access and ongoing tasks.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F11\u002F12\u002Fsprinto-ai-agent-offboarding\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2025\u002F10\u002F27095223\u002Fai_agents-1500.webp","2026-11-12T06:00:57+00:00","2026-11-12T07:00:02.754356+00:00",7,[17,20],{"name":18,"type":19},"AI agent","technology",{"name":21,"type":22},"OWASP","vendor","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":23,"icon":25,"name":26,"slug":27},null,"AI Security","ai-security",[29,34,36],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",[],[21],{"controls":44,"vendors":129},[45,74,103],{"slug":46,"name":47,"problem":48,"products":49},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"slug":75,"name":76,"problem":77,"products":78},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"slug":104,"name":105,"problem":106,"products":107},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[108,113,121],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":109,"product_name":110,"url":111,"description":112},"idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":140},"ai-agent-offboarding-the-credential-and-audit-trail-problem","AI Agent Offboarding: The Credential and Audit Trail Problem","When AI agents are decommissioned, organizations frequently delete the dashboard entry without revoking the credentials, API keys, or OAuth tokens the agent held — leaving live, unmonitored access paths that attackers or rogue processes can exploit. Unlike human offboarding, which typically involves IT and HR checklists, AI agent retirement lacks standardized procedures, meaning lingering service accounts accumulate silently over time. Without proper offboarding, there is also no guarantee that decision logs and audit trails are preserved, making it impossible to reconstruct what the agent did or authorized. This gap will grow rapidly as agentic AI proliferates, turning every retired AI worker into a potential standing access risk.",[135,136,137,138,139],"CIS Control 5: Account Management (v8)","NIST SP 800-53 AC-2: Account Management","NIST CSF 2.0 PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation o","ISO\u002FIEC 27001:2022 A.5.18: Access rights","NIS2 Article 21(2)(i)",{"NIS2 Article 21(2)(i)":141,"CIS Control 5: Account Management (v8)":142,"NIST SP 800-53 AC-2: Account Management":143,"ISO\u002FIEC 27001:2022 A.5.18: Access rights":144,"NIST CSF 2.0 PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation o":145},"This point explicitly covers human resources security, access control, and asset management, requiring organizations to maintain controlled processes for granting and revoking access — including for non-human agents — to protect essential services.","CIS Control 5 requires that all accounts — including non-human service accounts used by AI agents — be inventoried and disabled or removed when no longer needed, directly addressing the lingering credentials left behind after agent deletion.","AC-2 mandates formal procedures for creating, enabling, disabling, and removing accounts, including automated alerts for inactive accounts — exactly the lifecycle governance missing for retired AI agents.","A.5.18 requires that access rights be removed or adjusted when employment or contractual arrangements change, a principle that extends to AI agent lifecycle events such as decommissioning.","This category requires that access entitlements be reviewed and revoked when no longer needed, which would have surfaced and eliminated orphaned AI agent credentials upon retirement."]