Anthropic CISO publishes a four question framework for governing agentic AI

Deputy CISO Jason Clinton laid out a practical playbook that scores agent risk by untrusted inputs, allowed actions, blast radius and observability, arguing teams should make risk legible and bounded rather than chase zero risk.