AI agent security needs execution governance

Identity and permissions alone cannot secure enterprise AI agents, as they govern access but not autonomous behavior. Box CISO Heather Ceylan says security must shift toward layered governance of execution, since access controls were designed for humans.