Agent Governance Register

Reviewed

NIST NCCoE agent identity crosswalk

NIST NCCoE Software and AI Agent Identity and Authorization project

In short: The NIST National Cybersecurity Center of Excellence runs a project on how AI agents can be identified, authenticated and authorized. Its comment summary was published on 29 September 2026. Two register controls map to the project's stated scope. The first use case is the software development lifecycle.

What does NIST NCCoE agent identity cover?

Project scope as described on nist.gov. No final guidance has been published.

Which register controls map to NIST NCCoE agent identity?

ControlReferenceWhat the text says
GOV-01 Agent inventoryProject scope: identificationHow AI agents can be identified.
GOV-06 Per-action policyProject scope: authorizationHow AI agents can be authorized.

What did we leave out, and why?

We did not map credential lifetime (GOV-05) to the authentication scope, because the page does not describe credential lifetimes.

If you can point to the official text that supports a mapping, write to the desk.

Reviewed by The Register desk