# Microsoft's Deputy CISO on Securing AI Agents

Page: https://stenobird.com/podcast/the-a16z-show-436525/microsoft-s-deputy-ciso-on-securing-ai-agents
Text version: https://stenobird.com/podcast/the-a16z-show-436525/microsoft-s-deputy-ciso-on-securing-ai-agents.md
Podcast: [The a16z Show](https://stenobird.com/podcast/the-a16z-show-436525)
Published: 2026-08-21T11:40:08+00:00
Episode link: https://a16z.simplecast.com/episodes/how-microsoft-is-securing-the-agentic-enterprise-aaron-zollman-j7eOe8NH
Audio file: https://mgln.ai/e/1344/afp-848985-injected.calisto.simplecastaudio.com/3f86df7b-51c6-4101-88a2-550dba782de8/episodes/c9e8f5d5-86c0-4e2d-98c4-2133fcb293ea/audio/128/default.mp3?aid=rss_feed&awCollectionId=3f86df7b-51c6-4101-88a2-550dba782de8&awEpisodeId=c9e8f5d5-86c0-4e2d-98c4-2133fcb293ea&feed=JGE3yC0V
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/the-a16z-show-436525/episodes/microsoft-s-deputy-ciso-on-securing-ai-agents
Duration seconds: 1515

## Resource

a16z's Joel De La Garza is joined by Aaron Zollman, Deputy CISO at Microsoft Gaming, to discuss how security teams can embrace AI agents without losing control. Aaron shares Microsoft's experience with OpenClaw, from the initial instinct to ban it to figuring out how to make it safe to use. They unpack what agents mean for identity, permissions, containerization, and monitoring, as well as how AI is shifting the CISO's role from saying "no" to safely enabling new technology. They also explore whether AI could help defenders patch vulnerabilities as quickly as they're discovered, and why new AI threats don't make the old security problems go away.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/the-a16z-show-436525/episodes/microsoft-s-deputy-ciso-on-securing-ai-agents/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/the-a16z-show-436525/microsoft-s-deputy-ciso-on-securing-ai-agents.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.