GOV-20: Change management for agent permissions
In short: Treat changes to an agent's permissions, tools or policies as changes that need a ticket, a reviewer and a record. Silent permission changes are how least privilege erodes over months. A change record shows auditors who widened access, when it happened and why.
What does GOV-20 require?
Treat changes to an agent's permissions, tools or policies as changes that need a ticket, a reviewer and a record.
Why does it matter?
Silent permission changes are how least privilege erodes over months. A change record shows auditors who widened access, when it happened and why.
How do you test it?
- Pick a recent permission change and find its ticket.
- Confirm the reviewer differs from the requester.
- Check the change log matches the live configuration.
Which platforms document GOV-20?
No platform in the register documents this control in full.
- 9.10NewCore not found in public materialChecked: NewCore: Discover; NewCore: Secure; NewCore: Govern; NewCore: Identity foundation; NewCore emerges from stealth; NewCore on AWS Marketplace, read
- 8.35Silverfort not found in public materialChecked: Silverfort: AI Agent Security; Silverfort unveils AI Agent Security; Silverfort and Google Cloud Agent Gateway; Silverfort pricing, read
- 7.30Astrix Security not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- 7.30Cyera Identity not found in public materialChecked: Oasis Agentic Access Management; Cyera completes Oasis Security acquisition, read
- 6.85Descope not found in public materialChecked: Descope Agentic Identity Hub; Descope Agentic Identity Hub 3.0, read
- 6.55Aembit not found in public materialChecked: Aembit home; Aembit IAM for Agentic AI is generally available; Aembit pricing, read
- 6.55Token Security not found in public materialChecked: Token Security home, read
- 6.55SailPoint Entro not found in public materialChecked: SailPoint agentic AI security; SailPoint closes Entro Security acquisition, read
- 6.35Clutch Security not found in public materialChecked: Clutch Security platform, read
- 5.50Idira not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read
Which framework references apply?
No framework mapping is confirmed for this control yet. See the framework crosswalks for what we checked.
Which controls are related?
- GOV-08No self-approval
- GOV-09Policy testing before go-live
- GOV-15Periodic access review
Glossary: separation of duties.
Reviewed by The Register desk