Cyber Risk Management Podcast

EP 214: AI Agents Don't Behave Like Humans

Cyber Risk Management Podcast

Show Notes

Your cybersecurity tools were built for people: a login, a single sign-on, an email address. But the AI agents now showing up inside your company don't work that way, and most of them slip right past your controls. So how do you find the "Shadow AI" already running in your business, and get a handle on it? Let's find out with our guest Nancy Wang, Chief Technology Officer at 1Password, who works at the front edge of how machines get access to systems. Your hosts are Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.

LinkedIn profile profile: https://www.linkedin.com/in/wangnancy/

1Password: https://1password.com/

More from Cyber Risk Management Podcast

Oct 20, 2026

Your cyber strategy is only as strong as the people who carry it out. Deidre Diamond, founder and CEO of CyberSN, has spent more than 20 years studying the cybersecurity workforce. Learn the executive questions that reveal true capability, why burnout is an execution risk, and how a workforce map turns a headcount plea into a business case. Your hosts are Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.

Oct 6, 2026

Your firewalls, access rules, and least privilege all assume software behaves the same way every time. AI models don't. So what still works, what breaks, and what should you build next? Our guest Dan Stocker, Principal Cybersecurity Architect at JPMorgan Chase and a Cloud Security Alliance contributor, explains why every AI agent needs its own identity, what your assistant's memory costs you in privacy, and where human judgment still matters most. Your hosts are Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.

Sep 22, 2026

Every system you've ever governed is a gear. Same input, same output. AI is the first system that guesses back, and that's why your management instincts misfire on it. Kip's new book, Gears Don't Guess, is out Sept 28th. Jake interviews him on why he wrote it, who it's for (the CFO, the general counsel, the risk manager, and the CISO), and the practical tasks, templates, and self-assessment that make it work on the job. The Kindle version is free through Oct 2. Your hosts are Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.

Sep 8, 2026

Tired of swinging the “compliance hammer” and hitting people until they submit to you? Would you rather be influential, and not dictatorial? Let's find out how you can with your hosts Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.

Aug 25, 2026

When a hospital's systems go down, care does not stop. It goes back to pen and paper, and the first sign is quiet, because the alerts stop. Physician and CISSP Mark Yoffe explains clinical compensating controls: the steps clinicians take to keep patients safe during downtime. He covers who owns the clinical workflow, how to make controls workable and tested, how to recover information lost in the "memory hole," and what leaders should demand as proof. Paper is not the same as proof. Your hosts are Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.

See all episodes →