#446 - Rethinking Identity for AI Agents with Rick Scot

<p>Rick Scot, Global CIO and CISO at Elevate Textiles, joins Jim and Jeff to talk about how he went from leading a data team to holding both the CIO and CISO seats at a global manufacturing company. Rick shares the moment that pulled him into security, how his tight-knit Charlotte cyber community shapes his thinking, and how he balances speed and control when the two roles pull in different directions. The conversation moves into identity for the age of AI agents: whether an agent is a human or non-human identity (Rick argues it&#39;s neither), who should own accountability when something goes wrong, and how session termination has to extend beyond turning off an account. Rick also digs into shadow AI, the real cost of tokens versus flat-rate licenses, and how he evaluates new identity technology against his organization&#39;s size and risk appetite. The episode closes with what excites and concerns him most about AI over the next three to five years, his advice for identity practitioners, and a lighter look at hobbies people wouldn&#39;t expect.</p><p><br></p><p>Connect with Rick: https://www.linkedin.com/in/rickscot/</p><p><br></p><p>Connect with us on LinkedIn:</p><p><br></p><p>Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/</p><p><br></p><p>Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/</p><p><br></p><p>Visit the show on the web at http://idacpodcast.com</p><p><br></p><p>00:00 - Intro and community shoutouts</p><p>07:06 - Introducing Rick Scot, Global CIO and CISO at Elevate Textiles</p><p>07:46 - How Rick got into cybersecurity</p><p>09:22 - Charlotte&#39;s tight-knit cyber community</p><p>11:18 - The moment that made security the focus</p><p>13:06 - Balancing the CIO and CISO roles</p><p>16:17 - What &quot;Identity at the Center&quot; means to Rick</p><p>19:26 - Where to start when building an IAM program</p><p>23:29 - Balancing risk and innovation with AI</p><p>27:46 - Who should own accountability for an AI agent</p><p>29:38 - A hierarchy for agent identities</p><p>33:31 - Terminating access and sessions, not just accounts</p><p>36:25 - Dealing with shadow AI</p><p>41:37 - Standing up a governance process for new AI projects</p><p>43:19 - Evaluating new identity technology and token costs</p><p>48:51 - Training and governance around AI usage</p><p>52:22 - Established vendors versus disruptive startups</p><p>56:56 - Looking three to five years ahead</p><p>1:00:20 - Advice for identity practitioners</p><p>1:01:41 - Lightning round: hobbies and surprises</p><p>1:08:40 - Closing and where to find Rick</p><p><br></p><p>IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, Rick Scot, Elevate Textiles, CIO, CISO, identity and access management, IAM program, identity governance, AI agents, non-human identity, agentic identity, shadow AI, session management, offboarding, token costs, Charlotte cybersecurity community, identity leadership</p>