Data Is the New Oil, in That It's Useless Until You Refine It

Agentic AI is exposing that most organizations' "controls" and data permissions were never actually enforced, just assumed.

• Controls are the new attack surface: Citing OWASP's 2026 State of Agentic AI Security report, an allow list meant to contain a coding agent instead auto-approved the exact command an attacker needed.
• Identity-centric security isn't enough: Jake Lorz (Cintas CISO) says agentic AI forces a shift to 'action-centric' controls asking what an agent can do, under what conditions, and for how long.

Themes, sentiment and reasons are AI-written paraphrases, checked so they never quote an episode. They may contain errors. Not investment advice. Episodes remain the property of their creators.