CYBERSECURITYTRACKER
Permanent story citation

Most companies count AI agents as insiders, and CISOs worry about their own liability

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10214

As cited

Copy frozen at (site build).

ai security

Most companies count AI agents as insiders, and CISOs worry about their own liability

A Trellix survey of 600 CISOs found that 95% of companies reported an artificial intelligence (AI) agent or autonomous system involvement in an insider incident within the past 12 months. Most respondents classify these systems as insiders because they use employee credentials to access sensitive resources. The findings underscore growing concerns about AI agent security and organizational liability.

Why it matters: CISOs need to treat AI agents and machine identities as insider threats in their security posture, access controls, and incident response procedures, as autonomous systems now routinely operate with human permissions across sensitive systems.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary