EPM and Large Language Model (LLM) Agents, Installs, Frontends, Etc

David Ericson
Tue, 11 Nov 2025 17:03:08 +0000
Discussions & Questions

We’re a fully EPM Cloud shop. Our company has been entertaining AI and the various LLM approaches. The AI world tells EVERYONE to use their tool(s) to help them work smarter and increase productivity. The InfoSec world cringes at the possible probable data sharing stealing when not properly regulated.

We already have a data loss prevention (DLP) approach with InfoSec regarding 3rd party and unapproved file sharing and hosting solutions. At this point, it mainly centers around InfoSec’s scans and research regarding said solutions, and we implement the block policies if needed. We already block installers via Admin Approval, so these explicit DLP block policies are to help avoid any unauthorized elevations. We’re working through LLMs and wondering if there’s a better approach than what we are currently doing with DLP.

Do you have any already tested approaches or best practices for LLM blocking? Any already curated lists of known LLM agents, installs, frontends, etc.? LLM and AI agents pose a slightly different problem than other “installers” due to their command line options. E.g. Python has LLM installation options that work with Python libraries. Sure, at some point there’s probably a DLL, EXE, etc. that we could target, but this “feels” different than the other EPM policies we’ve been building.

Thanks!

4 posts - 3 participants