More Than Two-Thirds of Organizations Cannot Clearly Distinguish AI Agent from Human Actions as Over-Privileged Access Becomes Widespread, Cloud Security Alliance Study Finds As AI agents take on greater autonomy and operational responsibility within organizations, the IAM models used to manage them haven't kept pace. Published: 2026-03-24