How to Secure AI Agents at Machine Speed | Everpure CISO Rick Orloff

Are your AI agents a security risk or your next great hire? Everpure CISO Rick Orloff explains how to secure "digital workers" at machine speed, without throwing out the security model you already have. For Cybersecurity Awareness Month, Shawn Rosemarin sits down with Rick Orloff, Chief Information Security Officer at Everpure, to turn down the AI doom scroll and focus on what security leaders can actually act on today. In this episode: - Why AI agents should be treated like employees: an identity, scoped permissions, and a human owner who is accountable - Personal-assistant agents vs. production agents, and what breaks when the employee who built them leaves - Why controls must be designed for machine speed, with agents watching agents, separation of duties, and humans in the loop - How to decide where a human checkpoint belongs, and why regulators won't accept "the agent did it" - Why least privilege is what makes drift detection possible - Why you should build your security program for 18 months from now - Rick's two-question litmus test for deciding what to fix first CHAPTERS 0:00 Turning down the AI doom scroll 0:54 Meet Rick Orloff, Everpure CISO 1:26 What CISOs need to focus on in the AI era 3:15 Digital workers vs. human workers 5:11 Agent credentials: personal assistants vs. production agents 7:32 Designing security for machine speed 9:03 Agents watching agents and humans in the loop 10:34 Does human oversight slow AI down? Blast radius and accountability 12:22 Using AI to defend against AI 13:22 The credit card fraud analogy 14:43 A permissions framework for agents, APIs, and MCPs 16:07 Situational awareness: build for 18 months from now 17:52 The horse-and-buggy era of AI 20:31 Human + machine: augmented intelligence 21:21 Rick's two-question test for what to fix first 22:08 Closing thoughts: speed limits for digital workers ABOUT THE GUEST Rick Orloff is Chief Information Security Officer at Everpure. His background spans the Fortune 500 and U.S. government, and he focuses on practical, actionable security over theory. #CybersecurityAwarenessMonth #AIAgents #CISO #AISecurity #Cybersecurity #ZeroTrust