With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance
The source argues that SOC 2 criteria can cover AI agents but do not explicitly require organizations or auditors to treat agents as a distinct identity class. As a result, agents may add risk to an environment without causing any control to fail.
CERT24