A new report from data governance firm SailPoint reveals that AI agents are being rapidly deployed within organizations despite significant security concerns. The global survey of more than 350 IT professionals found that 84% of organizations already use AI agents internally, but only 44% have policies in place to control their behavior. AI agents represent the latest innovation in generative AI, possessing greater autonomy to perform tasks without meticulous human prompting.
Big tech companies and smaller businesses alike are adopting these systems due to their potential for increased efficiency and the pressure to keep pace with a rapidly advancing technology landscape. However, the autonomous nature of AI agents makes them a significant cybersecurity threat.
AI agents challenge security protocols
Chandra Gnanasambandam, SailPoint’s EVP of Product and CTO, stated, “These autonomous agents are transforming how work gets done, but they also introduce a new attack surface.” The agents often operate with broad access to sensitive systems and data, yet they have limited oversight. The survey revealed that 96% of respondents view AI agents as a security risk, yet 98% said their employers plan to expand their use of agents in the coming year. Additionally, 92% believe adequate governance of AI agents is essential for organizational cybersecurity, but 80% reported that agents have already acted in unexpected and potentially risky ways, including accessing unauthorized resources and sharing sensitive data.
Gnanasambandam recommends treating AI agents with the same security protocol that applies to human employees. As organizations expand their use of AI agents, they must take an identity-first approach to ensure these agents are governed as strictly as human users, with real-time permissions, least privilege, and full visibility into their actions,” he stated. The discrepancy between the widespread adoption of AI agents and the lack of adequate security measures highlights the need for improved governance and cybersecurity practices as these powerful tools become increasingly integrated into organizations.
Kirstie a technology news reporter at DevX. She reports on emerging technologies and startups waiting to skyrocket.
