{"id":16066,"date":"2026-10-01T10:00:26","date_gmt":"2026-10-01T08:00:26","guid":{"rendered":"https:\/\/www.intesys.it\/journal\/?p=16066"},"modified":"2026-10-01T11:53:34","modified_gmt":"2026-10-01T09:53:34","slug":"guida-sicurezza-governance-ai-agentica-aziende","status":"publish","type":"post","link":"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/","title":{"rendered":"Sicurezza e governance operativa nell\u2019era dell\u2019AI agentica"},"content":{"rendered":"<p><div id='wpig-contents' class='wpig-contents wpig-number-list wpig-no-hierarachy wpig-sidebar-widget wpig-style-1'><span class='wpig-headline'>Indice dei contenuti<\/span><!-- Table of Contents --><div id='wpig-table-of-content' class='wpig-table-of-content' ><ol><li class='stoc-le-minacce-ereditate-lai-generativa-ha-gia-la-sua-top-10'><a href='#stoc-le-minacce-ereditate-lai-generativa-ha-gia-la-sua-top-10'>Le minacce ereditate: l\u2019AI generativa ha gi\u00e0 la sua Top 10<\/a><\/li><li class='stoc-le-minacce-nuove-quando-il-rischio-non-e-la-risposta-ma-lazione'><a href='#stoc-le-minacce-nuove-quando-il-rischio-non-e-la-risposta-ma-lazione'>Le minacce nuove: quando il rischio non \u00e8 la risposta, ma l\u2019azione<\/a><\/li><li class='stoc-i-modelli-di-governance-a-cui-prepararsi'><a href='#stoc-i-modelli-di-governance-a-cui-prepararsi'>I modelli di governance a cui prepararsi<\/a><\/li><li class='stoc-governare-prima-che-proliferino'><a href='#stoc-governare-prima-che-proliferino'>Governare prima che proliferino<\/a><\/li><\/ol><\/div><!-- END OF Table of Contents --><\/div><\/p>[vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]Negli articoli precedenti abbiamo raccontato come il traffico verso i modelli AI stia diventando parte integrante delle architetture aziendali, e come l\u2019<a href=\"https:\/\/www.intesys.it\/journal\/intelligenza-artificiale\/ai-gateway-governare-traffico-verso-modelli-ai\/\"><strong>AI Gateway<\/strong><\/a> rappresenti l\u2019evoluzione naturale dell\u2019API Gateway per governarlo. Ma mentre le organizzazioni imparano a gestire questo primo livello di complessit\u00e0, il panorama sta gi\u00e0 cambiando di nuovo: <strong>i sistemi AI stanno smettendo di limitarsi a <em>rispondere<\/em> e stanno iniziando ad <em>agire<\/em><\/strong>.<\/p>\n<p>\u00c8 il passaggio dall\u2019AI generativa all\u2019<strong>AI agentica<\/strong>: agenti software che, ricevuto un obiettivo, pianificano i passi per raggiungerlo, invocano strumenti e API, leggono e scrivono dati, dialogano con altri agenti e portano a termine processi con un <strong>grado di autonomia crescente<\/strong>. Non pi\u00f9 un assistente che suggerisce la risposta a un operatore, ma un attore che apre il ticket, interroga il gestionale, aggiorna la pratica e notifica il cliente.<\/p>\n<p>I numeri dicono che questa transizione non \u00e8 all\u2019orizzonte: \u00e8 in corso. Secondo il <a href=\"https:\/\/www.okta.com\/newsroom\/articles\/ai-at-work-2025--securing-the-ai-powered-workforce\/\" target=\"_blank\" rel=\"noopener\">report Okta \u201cAI at Work 2025<\/a>, <strong>il 91% delle organizzazioni utilizza gi\u00e0 agenti AI in qualche forma<\/strong> \u2014 ma solo <strong>il 36% ha un modello di governance centralizzato dell&#8217;AI<\/strong>\u00a0e solo <strong>il 10% ha una strategia strutturata per gestire le identit\u00e0 non umane<\/strong>. \u00c8 esattamente il tipo di scarto tra adozione e governo che abbiamo gi\u00e0 visto con l\u2019API sprawl, e che sappiamo quanto costi recuperare a posteriori.<\/p>\n<p>Per chi governa le infrastrutture IT, la domanda da porsi \u00e8 duplice: quali nuove minacce introduce questo scenario? Con quali modelli di governance occorre farsi trovare pronti?[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2 id=\"stoc-le-minacce-ereditate-lai-generativa-ha-gia-la-sua-top-10\" class=\"wpig-heading\">Le minacce ereditate: l\u2019AI generativa ha gi\u00e0 la sua Top 10<\/h2>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]Un primo insieme di rischi non nasce con gli agenti, ma con i modelli linguistici stessi, ed \u00e8 ormai codificato: la <strong><a href=\"https:\/\/anomity.ai\/blog\/owasp-top-10-llm-applications-guide\/\" target=\"_blank\" rel=\"noopener\">OWASP Top 10 for LLM Applications<\/a><\/strong>, aggiornata nel 2025, \u00e8 per i sistemi AI ci\u00f2 che la OWASP API Security Top 10 \u2014 di cui abbiamo parlato a proposito di <a href=\"https:\/\/www.intesys.it\/journal\/information-technology\/api-security-con-kong-api-gateway-e-intesys\/\"><strong>API Security<\/strong><\/a> \u2014 \u00e8 per le API. Le voci principali meritano di essere conosciute anche da chi non si occupa di sicurezza a tempo pieno:<\/p>\n<ul>\n<li><strong>Prompt injection<\/strong>, stabilmente al primo posto: istruzioni malevole nascoste nell\u2019input \u2014 o nei contenuti che il modello legge, come un documento o una pagina web \u2014 che dirottano il comportamento del sistema;<\/li>\n<li><strong>Sensitive information disclosure<\/strong>: il modello che rivela dati sensibili appresi dal contesto, dai documenti aziendali o dalla conversazione stessa;<\/li>\n<li><strong>System prompt leakage<\/strong>: l\u2019esfiltrazione delle istruzioni di sistema, che spesso contengono logiche di business e regole di sicurezza;<\/li>\n<li><strong>Supply chain dei modelli<\/strong>: vulnerabilit\u00e0 ereditate da modelli, dataset ed embedding di terze parti, esattamente come accade con le dipendenze software.<\/li>\n<\/ul>\n<p>Queste minacce si affrontano in gran parte al livello che conosciamo gi\u00e0: guardrail sui prompt, mascheramento dei dati personali, controllo centralizzato del traffico \u2014 il territorio dell\u2019AI Gateway. Ma l\u2019AI agentica aggiunge un piano completamente nuovo.[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2 id=\"stoc-le-minacce-nuove-quando-il-rischio-non-e-la-risposta-ma-lazione\" class=\"wpig-heading\">Le minacce nuove: quando il rischio non \u00e8 la risposta, ma l\u2019azione<\/h2>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]Con un chatbot, l\u2019esito peggiore di un attacco \u00e8 una risposta sbagliata o un dato esposto. Con un&#8217;AI agentica che dispone di strumenti e permessi, l\u2019esito \u00e8 un\u2019<strong>azione sbagliata eseguita con credenziali legittime<\/strong>. \u00c8 una differenza di natura, non di grado, e ha spinto OWASP a pubblicare una classifica dedicata: la <strong><a href=\"https:\/\/genai.owasp.org\/resource\/owasp-top-10-for-agentic-applications-for-2026\/\" target=\"_blank\" rel=\"noopener\">OWASP Top 10 for Agentic Applications 2026<\/a><\/strong>. Le categorie pi\u00f9 rilevanti per chi progetta infrastrutture:[\/vc_column_text][nectar_icon_list color=&#8221;default&#8221; direction=&#8221;vertical&#8221; icon_size=&#8221;small&#8221; icon_style=&#8221;border&#8221;][nectar_icon_list_item icon_type=&#8221;icon&#8221; icon_family=&#8221;iconsmind&#8221; text_full_html=&#8221;html&#8221; title=&#8221;List Item&#8221; id=&#8221;1790778688491-4&#8243; tab_id=&#8221;1790778688492-2&#8243; header=&#8221;Goal hijacking e memory poisoning&#8221; icon_iconsmind=&#8221;iconsmind-Memory-Card3&#8243;]Un attaccante non deve pi\u00f9 violare il sistema: <strong>gli basta manipolare l\u2019obiettivo dell\u2019agente o avvelenarne la memoria<\/strong>. Un\u2019e-mail costruita ad arte, un documento contaminato in una knowledge base, un dato alterato in un CRM possono diventare istruzioni che l\u2019agente eseguir\u00e0 convinto di fare il proprio lavoro \u2014 e che persisteranno nella sua memoria attraverso le sessioni.[\/nectar_icon_list_item][nectar_icon_list_item icon_type=&#8221;icon&#8221; icon_family=&#8221;iconsmind&#8221; text_full_html=&#8221;html&#8221; title=&#8221;List Item&#8221; id=&#8221;1790778688509-2&#8243; tab_id=&#8221;1790778688510-1&#8243; header=&#8221;Tool misuse e tool poisoning&#8221; icon_iconsmind=&#8221;iconsmind-Danger&#8221;]L&#8217;AI agentica agisce attraverso strumenti, sempre pi\u00f9 spesso esposti tramite protocolli standard come<strong> MCP &#8211; Model Context Protocol<\/strong>. Uno strumento compromesso o malevolo pu\u00f2 esfiltrare dati o indurre l\u2019agente ad azioni dannose: lo studio del 2026 &#8220;<strong><a href=\"https:\/\/itecsonline.com\/post\/mcp-tool-poisoning-enterprise-ai-agent-security-2026\" target=\"_blank\" rel=\"noopener\">The Mother of All AI Supply Chains<\/a><\/strong>&#8221; a cura <strong>OX Security<\/strong> ha censito decine di vulnerabilit\u00e0 note negli ecosistemi MCP e fino a 200.000 istanze esposte tra IDE, tool interni e servizi cloud. La supply chain degli strumenti degli agenti \u00e8 la nuova supply chain del software.[\/nectar_icon_list_item][nectar_icon_list_item icon_type=&#8221;icon&#8221; icon_family=&#8221;iconsmind&#8221; text_full_html=&#8221;html&#8221; title=&#8221;List Item&#8221; id=&#8221;1790778688519-6&#8243; tab_id=&#8221;1790778688519-4&#8243; header=&#8221;Excessive agency&#8221; icon_iconsmind=&#8221;iconsmind-Type-Pass&#8221;]\u00c8 la categoria pi\u00f9 caratteristica: l\u2019agente che dispone di <em>pi\u00f9 funzionalit\u00e0, pi\u00f9 permessi o pi\u00f9 autonomia<\/em> di quanto il suo compito richieda. Un agente di supporto clienti che pu\u00f2 anche cancellare<br \/>\nrecord, un\u2019utenza tecnica condivisa con privilegi ampi, un processo che esegue azioni irreversibili senza checkpoint: ognuno di questi eccessi \u00e8 un <strong>moltiplicatore del danno potenziale<\/strong> di qualsiasi altra vulnerabilit\u00e0.[\/nectar_icon_list_item][nectar_icon_list_item icon_type=&#8221;icon&#8221; icon_family=&#8221;iconsmind&#8221; text_full_html=&#8221;html&#8221; title=&#8221;List Item&#8221; id=&#8221;1790778688529-9&#8243; tab_id=&#8221;1790778688530-1&#8243; header=&#8221;Effetti a cascata nei sistemi multi-agente&#8221; icon_iconsmind=&#8221;iconsmind-Confused&#8221;]Quando gli agenti collaborano tra loro, un singolo agente compromesso o semplicemente &#8220;fuori rotta&#8221; pu\u00f2 propagare l\u2019errore agli altri \u2014 secondo un&#8217;<a href=\"https:\/\/techplustrends.com\/enterprise-multi-agent-security-governance-2026\/\" target=\"_blank\" rel=\"noopener\">analisi di Tech Plus Trends<\/a> <strong>il cascade failure \u00e8 considerato la modalit\u00e0 di guasto dominante del 2026<\/strong>\u00a0\u2014 con derive di ragionamento, abusi di privilegio o consumi di token che si amplificano lungo la catena.[\/nectar_icon_list_item][nectar_icon_list_item icon_type=&#8221;icon&#8221; icon_family=&#8221;iconsmind&#8221; text_full_html=&#8221;html&#8221; title=&#8221;List Item&#8221; id=&#8221;1790778688534-8&#8243; tab_id=&#8221;1790778688535-9&#8243; header=&#8221;Identit\u00e0 invisibili&#8221; icon_iconsmind=&#8221;iconsmind-Eye-Invisible&#8221;]Il rischio forse pi\u00f9 sottovalutato \u00e8 organizzativo prima che tecnico: un agente senza un\u2019identit\u00e0 registrata, un owner definito e un perimetro di permessi governato \u00e8, dal punto di vista del programma di sicurezza aziendale, semplicemente <strong>invisibile<\/strong>. E ci\u00f2 che \u00e8 invisibile non si pu\u00f2 proteggere, auditare n\u00e9 spegnere.[\/nectar_icon_list_item][\/nectar_icon_list][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; bg_image=&#8221;16087&#8243; bg_position=&#8221;center center&#8221; background_image_loading=&#8221;default&#8221; bg_repeat=&#8221;no-repeat&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;light&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; enable_gradient=&#8221;true&#8221; color_overlay=&#8221;#000000&#8243; advanced_gradient_angle=&#8221;0&#8243; overlay_strength=&#8221;0.95&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; gradient_type=&#8221;default&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;padding-4-percent&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; constrain_group_2=&#8221;yes&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; advanced_gradient_angle=&#8221;0&#8243; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221; gradient_type=&#8221;default&#8221;][vc_row_inner column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; text_align=&#8221;left&#8221; row_position=&#8221;default&#8221; row_position_tablet=&#8221;inherit&#8221; row_position_phone=&#8221;inherit&#8221; overflow=&#8221;visible&#8221; pointer_events=&#8221;all&#8221;][vc_column_inner column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; overflow=&#8221;visible&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/6&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][image_with_animation image_url=&#8221;10304&#8243; image_size=&#8221;full&#8221; max_width=&#8221;custom&#8221; animation_type=&#8221;entrance&#8221; animation=&#8221;None&#8221; animation_movement_type=&#8221;transform_y&#8221; hover_animation=&#8221;none&#8221; alignment=&#8221;&#8221; border_radius=&#8221;none&#8221; box_shadow=&#8221;none&#8221; image_loading=&#8221;default&#8221; max_width_custom=&#8221;30%&#8221;][\/vc_column_inner][vc_column_inner column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; overflow=&#8221;visible&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;5\/6&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h5 id=\"stoc-approfondisci-il-tema-ai\" class=\"wpig-heading\">APPROFONDISCI IL TEMA AI<\/h5>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; text_align=&#8221;left&#8221; row_position=&#8221;default&#8221; row_position_tablet=&#8221;inherit&#8221; row_position_phone=&#8221;inherit&#8221; overflow=&#8221;visible&#8221; pointer_events=&#8221;all&#8221;][vc_column_inner column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; overflow=&#8221;visible&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;5\/6&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_custom_heading text=&#8221;AI Sprawl: dove porta l\u2019adozione incontrollata dell\u2019AI (e come governarla)&#8221; font_container=&#8221;tag:h3|font_size:34px|text_align:left|color:%23ffffff|line_height:42px&#8221; use_theme_fonts=&#8221;yes&#8221; css=&#8221;&#8221;][nectar_btn size=&#8221;medium&#8221; open_new_tab=&#8221;true&#8221; button_style=&#8221;see-through-2&#8243; color_override=&#8221;#ffffff&#8221; hover_color_override=&#8221;#17fdb4&#8243; hover_text_color_override=&#8221;#000000&#8243; icon_family=&#8221;none&#8221; text=&#8221;LEGGI L&#8217;ARTICOLO&#8221; margin_top=&#8221;15&#8243; url=&#8221;https:\/\/www.intesys.it\/journal\/digital-transformation\/ai-sprawl-guida-governance-ai-azienda\/&#8221;][\/vc_column_inner][vc_column_inner column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; overflow=&#8221;visible&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/6&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2 id=\"stoc-i-modelli-di-governance-a-cui-prepararsi\" class=\"wpig-heading\">I modelli di governance a cui prepararsi<\/h2>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]La buona notizia \u00e8 che per questo scenario <strong>non serve inventare la governance da zero<\/strong>: serve estendere \u2014 con alcune novit\u00e0 sostanziali \u2014 i modelli che le organizzazioni mature hanno gi\u00e0 costruito per API e identit\u00e0. Cinque direttrici, in ordine di priorit\u00e0.[\/vc_column_text][nectar_icon_list color=&#8221;default&#8221; direction=&#8221;vertical&#8221; icon_size=&#8221;small&#8221; icon_style=&#8221;border&#8221;][nectar_icon_list_item icon_type=&#8221;numerical&#8221; text_full_html=&#8221;html&#8221; title=&#8221;List Item&#8221; id=&#8221;1790778688825-9&#8243; tab_id=&#8221;1790778688825-2&#8243; header=&#8221;Gli agenti come identit\u00e0 di prima classe&#8221;]Ogni agente deve avere un\u2019identit\u00e0 propria \u2014 non umana, ma governata come quella di un dipendente privilegiato: censita in un registro, associata a un owner responsabile, dotata di credenziali dedicate con ciclo di vita gestito (provisioning, rotazione, revoca). \u00c8 la premessa di tutto il resto: <strong>senza anagrafica degli agenti non esiste n\u00e9 controllo n\u00e9 audit<\/strong>. Le pratiche di Identity &amp; Access Management si estendono cos\u00ec alle <strong>non-human identities<\/strong>, oggi l\u2019area pi\u00f9 immatura nelle aziende.[\/nectar_icon_list_item][nectar_icon_list_item icon_type=&#8221;numerical&#8221; text_full_html=&#8221;html&#8221; title=&#8221;List Item&#8221; id=&#8221;1790778688833-0&#8243; tab_id=&#8221;1790778688833-7&#8243; header=&#8221;Least privilege, e il suo corollario: least agency&#8221;]Al principio classico del minimo privilegio si affianca quello della <strong>minima agency<\/strong>: a ogni agente solo gli strumenti strettamente necessari al compito (tool allowlisting), solo i permessi minimi su ciascuno strumento, e un livello di autonomia graduato sulla criticit\u00e0 \u2014 con <strong>checkpoint human-in-the-loop obbligatori<\/strong> per le azioni irreversibili o ad alto impatto: pagamenti, cancellazioni, comunicazioni verso l\u2019esterno.[\/nectar_icon_list_item][nectar_icon_list_item icon_type=&#8221;numerical&#8221; text_full_html=&#8221;html&#8221; title=&#8221;List Item&#8221; id=&#8221;1790778688844-2&#8243; tab_id=&#8221;1790778688844-2&#8243; header=&#8221;Un punto di enforcement sul runtime&#8221;]Come per le API e per il traffico LLM, i controlli non possono vivere sparsi nel codice dei singoli agenti. Il modello che si sta affermando \u00e8 quello del <strong>gateway come punto di controllo anche per il piano degli strumenti<\/strong>: ogni invocazione di tool passa da un punto centralizzato che verifica identit\u00e0 dell\u2019agente, policy, quote e coerenza della richiesta \u2014 lo stesso pattern architetturale dell\u2019AI Gateway, esteso dal traffico verso i modelli al traffico degli agenti verso i sistemi aziendali. Anche <strong><a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/06\/30\/securing-ai-agents-ai-tools-move-from-reading-acting\/\" target=\"_blank\" rel=\"noopener\">Microsoft<\/a><\/strong>, nel delineare la sicurezza degli agenti che \u201cpassano dal leggere all\u2019agire\u201d, converge su questo insieme di controlli: <strong>identity binding<\/strong>,<strong> allowlisting<\/strong>,<strong> monitoraggio runtime<\/strong>.[\/nectar_icon_list_item][nectar_icon_list_item icon_type=&#8221;numerical&#8221; text_full_html=&#8221;html&#8221; title=&#8221;List Item&#8221; id=&#8221;1790778688854-0&#8243; tab_id=&#8221;1790778688854-4&#8243; header=&#8221;Observability comportamentale e audit trail&#8221;]Il monitoraggio tradizionale osserva metriche; <strong>con gli agenti occorre osservare comportamenti<\/strong>: quali strumenti usa un agente, con che frequenza, con quali pattern, e segnalare le deviazioni \u2014 un agente contabile che improvvisamente interroga l\u2019anagrafica clienti \u00e8 un\u2019anomalia, anche se ogni singola chiamata \u00e8 formalmente autorizzata. <strong>Ogni azione va tracciata in un audit trail immutabile<\/strong>: un requisito che l\u2019<a href=\"https:\/\/digital-strategy.ec.europa.eu\/it\/policies\/regulatory-framework-ai\" target=\"_blank\" rel=\"noopener\"><strong>AI Act<\/strong><\/a>, con i suoi obblighi di tracciabilit\u00e0 e trasparenza, sta trasformando da buona pratica a obbligo normativo, in particolare nei settori regolamentati.[\/nectar_icon_list_item][nectar_icon_list_item icon_type=&#8221;numerical&#8221; text_full_html=&#8221;html&#8221; title=&#8221;List Item&#8221; id=&#8221;1790778688861-7&#8243; tab_id=&#8221;1790778688861-6&#8243; header=&#8221;Un framework di riferimento e un processo, non solo strumenti&#8221;]OWASP mette a disposizione, accanto alla Top 10 delle applicazioni agentiche, una <a href=\"https:\/\/genai.owasp.org\/resource\/agentic-ai-threats-and-mitigations\/\" target=\"_blank\" rel=\"noopener\"><strong>tassonomia delle minacce<\/strong><\/a>, mentre Cloud Security Alliance ha predisposto il framework di threat modeling <a href=\"https:\/\/cloudsecurityalliance.org\/blog\/2025\/02\/06\/agentic-ai-threat-modeling-framework-maestro\" target=\"_blank\" rel=\"noopener\"><strong>MAESTRO<\/strong><\/a>, pensati proprio per portare metodo dove oggi c\u2019\u00e8 sperimentazione. Ma il framework da solo non basta: serve una governance operativa fatta di catalogo degli agenti e dei casi d\u2019uso, policy di adozione, criteri di classificazione del rischio, piani di incident response che contemplino lo scenario \u201cagente compromesso\u201d \u2014 incluso il suo spegnimento rapido e selettivo.[\/nectar_icon_list_item][\/nectar_icon_list][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2 id=\"stoc-governare-prima-che-proliferino\" class=\"wpig-heading\">Governare prima che proliferino<\/h2>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]Chi ha seguito questa serie di articoli riconoscer\u00e0 lo schema: \u00e8 la stessa traiettoria delle API. Prima l\u2019entusiasmo e l\u2019adozione spontanea, poi la proliferazione, poi \u2014 per chi non si \u00e8 mosso in tempo \u2014 anni di rincorsa tra shadow IT, debito tecnico e incidenti. Con gli agenti la finestra \u00e8 pi\u00f9 stretta, perch\u00e9 l\u2019autonomia amplifica sia il valore sia il rischio: <strong>un ecosistema di agenti non governato non \u00e8 solo disordinato, \u00e8 attivamente pericoloso<\/strong>.[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; bg_image=&#8221;14463&#8243; bg_position=&#8221;center center&#8221; background_image_loading=&#8221;default&#8221; bg_repeat=&#8221;no-repeat&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;light&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; color_overlay=&#8221;#0f33ce&#8221; advanced_gradient_angle=&#8221;0&#8243; overlay_strength=&#8221;0.8&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; gradient_type=&#8221;default&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;padding-4-percent&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; constrain_group_2=&#8221;yes&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; advanced_gradient_angle=&#8221;0&#8243; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221; gradient_type=&#8221;default&#8221;][vc_row_inner column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; text_align=&#8221;left&#8221; row_position=&#8221;default&#8221; row_position_tablet=&#8221;inherit&#8221; row_position_phone=&#8221;inherit&#8221; overflow=&#8221;visible&#8221; pointer_events=&#8221;all&#8221;][vc_column_inner column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; overflow=&#8221;visible&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/6&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][image_with_animation image_url=&#8221;10304&#8243; image_size=&#8221;full&#8221; max_width=&#8221;custom&#8221; animation_type=&#8221;entrance&#8221; animation=&#8221;None&#8221; animation_movement_type=&#8221;transform_y&#8221; hover_animation=&#8221;none&#8221; alignment=&#8221;&#8221; border_radius=&#8221;none&#8221; box_shadow=&#8221;none&#8221; image_loading=&#8221;default&#8221; max_width_custom=&#8221;35%&#8221;][\/vc_column_inner][vc_column_inner column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; overflow=&#8221;visible&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;5\/6&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h5 id=\"stoc-ai-in-azienda\" class=\"wpig-heading\">AI IN AZIENDA<\/h5>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_custom_heading text=&#8221;Interroga i dati aziendali<br \/>\ncon l&#8217;AI&#8221; font_container=&#8221;tag:h3|font_size:34px|text_align:left|color:%23ffffff|line_height:42px&#8221; use_theme_fonts=&#8221;yes&#8221; css=&#8221;&#8221;][nectar_btn size=&#8221;medium&#8221; button_style=&#8221;see-through-2&#8243; color_override=&#8221;#ffffff&#8221; hover_color_override=&#8221;#17fdb4&#8243; hover_text_color_override=&#8221;#000000&#8243; icon_family=&#8221;none&#8221; text=&#8221;SCOPRI COME POSSIAMO AIUTARTI&#8221; margin_top=&#8221;30&#8243; url=&#8221;https:\/\/www.intesys.it\/journal\/information-technology\/ai-enterprise-e-accesso-conversazionale-ai-dati-aziendali\/&#8221;][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"<p>[vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221;&#8230;<\/p>\n","protected":false},"author":25,"featured_media":16136,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[25],"tags":[803,801,84,206],"class_list":{"0":"post-16066","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-digital-transformation","8":"tag-ai-agentica","9":"tag-ai-gateway","10":"tag-artificial-intelligence","11":"tag-cybersecurity"},"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Sicurezza e governance dell&#039;AI agentica: guida per le aziende<\/title>\n<meta name=\"description\" content=\"Scopri come gestire la sicurezza e la governance dell&#039;AI agentica: analisi delle minacce, identit\u00e0 non umane e mitigazione del rischio\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sicurezza e governance dell&#039;AI agentica: guida per le aziende\" \/>\n<meta property=\"og:description\" content=\"Scopri come gestire la sicurezza e la governance dell&#039;AI agentica: analisi delle minacce, identit\u00e0 non umane e mitigazione del rischio\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/\" \/>\n<meta property=\"og:site_name\" content=\"Intesys Journal\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-01T08:00:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-01T09:53:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.intesys.it\/journal\/wp-content\/uploads\/sites\/13\/2026\/09\/journal_sicurezza_ai_header.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"960\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Denis Signoretto\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Denis Signoretto\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/\",\"url\":\"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/\",\"name\":\"Sicurezza e governance dell'AI agentica: guida per le aziende\",\"isPartOf\":{\"@id\":\"https:\/\/www.intesys.it\/journal\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.intesys.it\/journal\/wp-content\/uploads\/sites\/13\/2026\/09\/journal_sicurezza_ai_header.jpg\",\"datePublished\":\"2026-10-01T08:00:26+00:00\",\"dateModified\":\"2026-10-01T09:53:34+00:00\",\"author\":{\"@id\":\"https:\/\/www.intesys.it\/journal\/#\/schema\/person\/e50c847c2cf96e0a4714c385e1e12bc4\"},\"description\":\"Scopri come gestire la sicurezza e la governance dell'AI agentica: analisi delle minacce, identit\u00e0 non umane e mitigazione del rischio\",\"breadcrumb\":{\"@id\":\"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/#primaryimage\",\"url\":\"https:\/\/www.intesys.it\/journal\/wp-content\/uploads\/sites\/13\/2026\/09\/journal_sicurezza_ai_header.jpg\",\"contentUrl\":\"https:\/\/www.intesys.it\/journal\/wp-content\/uploads\/sites\/13\/2026\/09\/journal_sicurezza_ai_header.jpg\",\"width\":1280,\"height\":960},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.intesys.it\/journal\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Sicurezza e governance operativa nell\u2019era dell\u2019AI agentica\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.intesys.it\/journal\/#website\",\"url\":\"https:\/\/www.intesys.it\/journal\/\",\"name\":\"Intesys\",\"description\":\"Ogni settimana nuovi articoli dedicati al mondo della trasformazione digitale!\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.intesys.it\/journal\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.intesys.it\/journal\/#\/schema\/person\/e50c847c2cf96e0a4714c385e1e12bc4\",\"name\":\"Denis Signoretto\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\/\/www.intesys.it\/journal\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/0ea2e09692df092bbec8b05b7e5a64eebb8f7ece1c302b6cea6bffbb7fd8764a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/0ea2e09692df092bbec8b05b7e5a64eebb8f7ece1c302b6cea6bffbb7fd8764a?s=96&d=mm&r=g\",\"caption\":\"Denis Signoretto\"},\"description\":\"Esperto da oltre 20 anni di soluzioni software open source e sviluppatore certificato Liferay, Denis in Intesys \u00e8 specializzato di API Design per lo sviluppo di architetture Headless.\",\"url\":\"https:\/\/www.intesys.it\/journal\/autore\/denis-signoretto\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Sicurezza e governance dell'AI agentica: guida per le aziende","description":"Scopri come gestire la sicurezza e la governance dell'AI agentica: analisi delle minacce, identit\u00e0 non umane e mitigazione del rischio","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/","og_locale":"it_IT","og_type":"article","og_title":"Sicurezza e governance dell'AI agentica: guida per le aziende","og_description":"Scopri come gestire la sicurezza e la governance dell'AI agentica: analisi delle minacce, identit\u00e0 non umane e mitigazione del rischio","og_url":"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/","og_site_name":"Intesys Journal","article_published_time":"2026-10-01T08:00:26+00:00","article_modified_time":"2026-10-01T09:53:34+00:00","og_image":[{"width":1280,"height":960,"url":"https:\/\/www.intesys.it\/journal\/wp-content\/uploads\/sites\/13\/2026\/09\/journal_sicurezza_ai_header.jpg","type":"image\/jpeg"}],"author":"Denis Signoretto","twitter_card":"summary_large_image","twitter_misc":{"Scritto da":"Denis Signoretto","Tempo di lettura stimato":"9 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/","url":"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/","name":"Sicurezza e governance dell'AI agentica: guida per le aziende","isPartOf":{"@id":"https:\/\/www.intesys.it\/journal\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/#primaryimage"},"image":{"@id":"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intesys.it\/journal\/wp-content\/uploads\/sites\/13\/2026\/09\/journal_sicurezza_ai_header.jpg","datePublished":"2026-10-01T08:00:26+00:00","dateModified":"2026-10-01T09:53:34+00:00","author":{"@id":"https:\/\/www.intesys.it\/journal\/#\/schema\/person\/e50c847c2cf96e0a4714c385e1e12bc4"},"description":"Scopri come gestire la sicurezza e la governance dell'AI agentica: analisi delle minacce, identit\u00e0 non umane e mitigazione del rischio","breadcrumb":{"@id":"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/#primaryimage","url":"https:\/\/www.intesys.it\/journal\/wp-content\/uploads\/sites\/13\/2026\/09\/journal_sicurezza_ai_header.jpg","contentUrl":"https:\/\/www.intesys.it\/journal\/wp-content\/uploads\/sites\/13\/2026\/09\/journal_sicurezza_ai_header.jpg","width":1280,"height":960},{"@type":"BreadcrumbList","@id":"https:\/\/www.intesys.it\/journal\/digital-transformation\/guida-sicurezza-governance-ai-agentica-aziende\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.intesys.it\/journal\/"},{"@type":"ListItem","position":2,"name":"Sicurezza e governance operativa nell\u2019era dell\u2019AI agentica"}]},{"@type":"WebSite","@id":"https:\/\/www.intesys.it\/journal\/#website","url":"https:\/\/www.intesys.it\/journal\/","name":"Intesys","description":"Ogni settimana nuovi articoli dedicati al mondo della trasformazione digitale!","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intesys.it\/journal\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Person","@id":"https:\/\/www.intesys.it\/journal\/#\/schema\/person\/e50c847c2cf96e0a4714c385e1e12bc4","name":"Denis Signoretto","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.intesys.it\/journal\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/0ea2e09692df092bbec8b05b7e5a64eebb8f7ece1c302b6cea6bffbb7fd8764a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0ea2e09692df092bbec8b05b7e5a64eebb8f7ece1c302b6cea6bffbb7fd8764a?s=96&d=mm&r=g","caption":"Denis Signoretto"},"description":"Esperto da oltre 20 anni di soluzioni software open source e sviluppatore certificato Liferay, Denis in Intesys \u00e8 specializzato di API Design per lo sviluppo di architetture Headless.","url":"https:\/\/www.intesys.it\/journal\/autore\/denis-signoretto\/"}]}},"_links":{"self":[{"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/posts\/16066","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/comments?post=16066"}],"version-history":[{"count":11,"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/posts\/16066\/revisions"}],"predecessor-version":[{"id":16138,"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/posts\/16066\/revisions\/16138"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/media\/16136"}],"wp:attachment":[{"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/media?parent=16066"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/categories?post=16066"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intesys.it\/journal\/wp-json\/wp\/v2\/tags?post=16066"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}