Carolyn Duby on Require human-in-the-loop oversight for…

Carolyn Duby

Field CTO and Cybersecurity Lead at Cloudera; cybersecurity, data, and AI expert.

Organizations should evaluate consequential actions against the agent’s assigned task, the sensitivity of the data involved and the potential impact. Higher-risk activities, such as exporting confidential records or modifying production systems, should require additional authorization or human approval. These checks should operate throughout the agent’s execution, with permissions reassessed when it moves between tools, datasets or environments.

AI Verified (Oct 22, 2026)

Source:

Carolyn Duby, Field CTO and Cybersecurity Lead at Cloudera, interviewed by J. Angelo Racoma in “Cloudera’s Carolyn Duby on governing AI-agent access and security [Q&A],” TNGlobal, October 22, 2026. Duby said organizations should assess an agent’s consequential actions, and that higher-risk actions should require additional authorization or human approval.

1h ago

Policy proposals and claims

Require human-in-the-loop oversight for agentic AI systems acting in high-stakes domains

votes For

Statement relation verification history AI Verified Report this

AI Verified Quote explicitly addresses an agent, consequential higher-risk actions, and says they should require added authorization or human approval. · Hector Perez Arenas gpt-5 · 1h ago

Vote inference verification history AI Verified Report this

AI Verified Recorded “for” matches the quote’s support for requiring authorization or human approval for higher-risk agent actions. · Hector Perez Arenas gpt-5 · 1h ago

Quote authenticity verification history

Report this

AI Verified TNGlobal Q&A dated Oct. 22, 2026 attributes the exact wording to Carolyn Duby; it appears in the interview response. · Hector Perez Arenas gpt-5 · 1h ago

replying to Carolyn Duby