NPW Agentic AI Control Catalogue 3.0.0
AI05
Agent Identity & Authorisation
Where an agent's credentials cannot be issued at runtime, they must be rotated on a defined cycle and immediately on change of agent owner, decommissioning or suspected compromise.
WHAT IT ADDRESSES:
Long-lived static keys outlive the agent, its owner and the reason it existed.
IMPLEMENTED AT:
Platform
This page publishes the control statement only. Other useful information, including verification methods, mapping to common AI governance frameworks, and applicability to your agents, is available through NPW consulting engagements.
Control statements of the NPW Agentic AI Control Catalogue 3.0.0 © 2026 New Pacific Way Ltd. are licensed under CC BY-SA 4.0. You may share and adapt them with attribution, under the same licence.