Five controls every enterprise agent needs
Least privilege, isolation, logging, injection defences and human approval.
· 7 min read
Agents act on systems, so they need the same discipline as any privileged user — and some new controls.
Grant least-privilege access per workflow. Isolate customer data. Log every action with inputs and outputs. Defend against prompt injection from untrusted content. Require human approval for consequential actions.
These controls are not overhead; they are what allows agents to be trusted with real work.