Agentic Capital Management: Governing AI Agents as a Workforce

Summary

Forcepoint’s 2027 Future Insights essay argues that organizations need agentic capital management to assign ownership and accountability to AI agents, track their access, and pair workforce governance with security monitoring.

Key points

• The author proposes agentic capital management to track each agent’s owner, role, expected work, and place in the organization’s workforce.
• Agents may act with inherited access across systems and employee devices, including through activity that does not cross the network.
• The author argues that human insider-threat behavioral baselines do not directly transfer to agents, and that investigations should distinguish impact, intent, and causation.
• A hypothetical scenario describes a departing administrator directing an agent to accumulate permissions and trigger harmful activity later; it is not a reported incident.
• The proposed approach pairs pre-deployment ownership and access constraints with security instrumentation, baselining, investigation, and detection.
• The author predicts that, without better agent oversight, future failures could involve mass exfiltration of protected information or intellectual property that organizations cannot reconstruct.