Is Your Agentic Rollout Creating New Cybersecurity Risks?

We've spent a lot of time talking about resilience, how leaders turn disruption into advantage, but this report isn't really about finding opportunity in chaos.

It's about protecting what you've built while you experiment with something fundamentally new.

Kevin, what made you decide cybersecurity for agentic AI needed its own playbook right now? Mainly because the

behavior of agentic systems is so notably different from traditional systems.

And I'll tell you candidly, I had a conversation with a board member of a public company a few months back just trying to get under the skin of this question.

And the big takeaway was we have very good information security guidelines for traditional infosec.

But this is a very different behavior set.

And I think the biggest thing of all is unlike traditional InfoSec protocols, which really are about testing and periodic checks, this is continuous.

It's really more about governance and the behavior of a team using agentic systems than it is about even better traditional cybersecurity controls.

So it's really different.

And that's why I made the quip about wish it was clearer about what to do.

There's a lot to figure out here and it's more ops than it is strictly relying on a CISO.

Yeah, I think that's really helpful, Kevin.

And we also know that this is such an innovative area.

The rules are being written today.

The textbook isn't out there yet.

So when we surveyed supply chain leaders recently, cybersecurity came out as the number one business continuity concern for COOs and number three for chief supply chain officers, even ahead of geopolitics.

What's driving that anxiety? Is it the threat of external bad actors or is it something else? I'd love to hear from you, Garen.

Yeah, I think Kevin's right when he talks about these new threats in the kind of the agentic area.

And we'll obviously come on to that and discuss that in a moment.

But I think the actual events, the actual cyber attacks are driving a lot of this anxiety.

If we think about even just the past 12 months, we've seen major cyber attacks on companies like Jaguar Land Rover here in the UK.

Marks & Spencer, a big retailer, also here in the UK.

So in the case of Jaguar Land Rover, I mean, that attack last September closed their production lines for well over a month.

They turned what had been a $750 million profit in Q3 of the previous year into a $375 million loss.