Your next employee might be an AI Agent. Does your access policy know that?

Under the DPDP Act and CERT-In's six-hour breach reporting window, an unmanaged agent identity with standing access to sensitive data is a …