What happens when AI stops being a tool and starts acting like an employee?

In this episode, Dd Budiharto, who works as a Chief Security Advisor at Microsoft, dives into the real security challenge most organizations aren’t ready for: agentic AI with identities and access. We break down how “shadow AI employees” are already creeping into enterprises, and what it actually means to secure AI inside enterprise platforms.

The takeaway is simple but urgent: if you’re not managing AI like part of your workforce, you don’t have control, you have exposure.

Disclaimer: All opinions expressed in this episode are the individual opinions of the host and guest featured.

The opinions do not reflect that of any organization.

Resources:

Microsoft Resources:

- https://learn.microsoft.com/en-us/security/security-for-ai/

- https://www.microsoft.com/en-us/security/blog/2026/03/19/new-tools-and-guidance-announcing-zero-trust-for-ai/

- https://learn.microsoft.com/en-us/copilot/microsoft-365/copilot-control-system/security-governance

- https://learn.microsoft.com/en-us/copilot/security/responsible-ai-overview-security-copilot

Other resources:

- https://www.nist.gov/itl/ai-risk-management-framework

- https://www.cisa.gov/resources-tools/resources/ai-data-security-best-practices-securing-data-used-train-operate-ai-systems