A new report from Deloitte has warned that businesses are deploying AI agents faster than their safety protocols and safeguards can keep up. Therefore, serious concerns around security, data privacy, and accountability are spreading.
\nAccording to the survey, agentic systems are moving from pilot to production so quickly that traditional risk controls, which were designed for more human-centred operations, are struggling to meet security demands.
\nJust 21% of organisations have implemented stringent governance or oversight for AI agents, despite the increased rate of adoption. Whilst 23% of companies stated that they are currently using AI agents, this is expected to rise to 74% in the next two years. The share of businesses yet to adopt this technology is expected to fall from 25% to just 5% over the same period.
\nPoor governance is the threat
\nDeloitte is not highlighting AI agents as inherently dangerous, but states the real risks are associated with poor context and weak governance. If agents operate as their own entities, their decisions and actions can easily become opaque. Without robust governance, it becomes difficult to manage and almost impossible to insure against mistakes.
\nAccording to Ali Sarrafi, CEO & Founder of Kovant, the answer is governed autonomy. \u201cWell-designed agents with clear boundaries, policies and definitions managed the same way as an enterprise manages any worker can move fast on low-risk work inside clear guardrails, but escalate to humans when actions cross defined risk thresholds.\u201d
\n\u201cWith detailed action logs, observability, and human gatekeeping for high-impact decisions, agents stop being mysterious bots and become systems you can inspect, audit, and trust.\u201d
\nAs Deloitte\u2019s report suggests, AI agent adoption is set to accelerate in the coming years, and only the companies that deploy the technology with visibility and control will hold the upper hand over competitors, not those who deploy them quickest.
\nWhy AI agents require robust guardrails
\nAI agents may perform well in controlled demos, but they struggle in real-world business settings where systems can be fragmented and data may be inconsistent.
\nSarrafi commented on the unpredictable nature of AI agents in these scenarios. \u201cWhen an agent is given too much context or scope at once, it becomes prone to hallucinations and unpredictable behaviour.\u201d
\n\u201cBy contrast, production-grade systems limit the decision and context scope that models work with. They decompose operations into narrower, focused tasks for individual agents, making behaviour more predictable and easier to control. This structure also enables traceability and intervention, so failures can be detected early and escalated appropriately rather than causing cascading errors.\u201d
\nAccountability for insurable AI
\nWith agents taking real actions in business systems, such as keeping detailed action logs, risk and compliance are viewed differently. With every action recorded, agents\u2019 activities become clear and evaluable, letting organisations inspect actions in detail.
\nSuch transparency is crucial for insurers, who are reluctant to cover opaque AI systems. This level of detail helps insurers understand what agents have done, and the controls involved, thus making it easier to assess risk. With human oversight for risk-critical actions and auditable, replayable workflows, organisations can produce systems that are more manageable for risk assessment.
\nAAIF standards a good first step
\nShared standards, like those being developed by the Agentic AI Foundation (AAIF), help businesses to integrate different agent systems, but current standardisation efforts focus on what is simplest to build, not what larger organisations need to operate agentic systems safely.
\nSarrafi says enterprises require standards that support operation control, and which include, \u201caccess permissions, approval workflows for high-impact actions, and auditable logs and observability, so teams can monitor behaviour, investigate incidents, and prove compliance.\u201d
\nIdentity and permissions the first line of defence
\nLimiting what AI agents can access and the actions they can perform is important to ensure safety in real business environments. Sarrafi said, \u201cWhen agents are given broad privileges or too much context, they become unpredictable and pose security or compliance risks.\u201d
\nVisibility and monitoring are important to keep agents operating inside limits. Only then can stakeholders have confidence in the adoption of the technology. If every action is logged and manageable, teams can then see what has happened, identify issues, and better understand why events occurred.
\nSarrafi continued, \u201cThis visibility, combined with human supervision where it matters, turns AI agents from inscrutable components into systems that can be inspected, replayed and audited. It also allows rapid investigation and correction when issues arise, which boosts trust among operators, risk teams and insurers alike.\u201d
\nDeloitte\u2019s blueprint
\nDeloitte\u2019s strategy for safe AI agent governance sets out defined boundaries for the decisions agentic systems can make. For instance, they might operate with tiered autonomy, where agents can only view information or offer suggestions. From here, they can be allowed to take limited actions, but with human approval. Once they have proven to be reliable in low-risk areas, they can be allowed to act automatically.
\nDeloitte\u2019s \u201cCyber AI Blueprints\u201d suggest governance layers and embedding policies and compliance capability roadmaps into organisational controls. Ultimately, governance structures that track AI use and risk, and embedding oversight into daily operations are important for safe agentic AI use.
\nReadying workforces with training is another aspect of safe governance. Deloitte recommends training employees on what they shouldn\u2019t share with AI systems, what to do if agents go off track, and how to spot unusual, potentially dangerous behaviour. If employees fail to understand how AI systems work and their potential risks, they may weaken security controls, albeit unintentionally.
\nRobust governance and control, alongside shared literacy are fundamental to the safe deployment and operation of AI agents, enabling secure, compliant, and accountable performance in real-world environments
\n(Image source: \u201cGlobal Hawk, NASA\u2019s New Remote-Controlled Plane\u201d by NASA Goddard Photo and Video is licensed under CC BY 2.0. )
\n\u00a0<\/p>\n
Want to learn more about AI and big data from industry leaders? Check out AI & Big Data Expo taking place in Amsterdam, California, and London. The comprehensive event is part of TechEx and co-located with other leading technology events. Click here for more information.
\nAI News is powered by TechForge Media. Explore other upcoming enterprise technology events and webinars here.
\nThe post Deloitte sounds alarm as AI agent deployment outruns safety frameworks appeared first on AI News.<\/p>\n","protected":false},"excerpt":{"rendered":"
A new report from Deloitte has warned that businesses are deploying AI agents faster than their safety protocols and safeguards can keep up. Therefore, serious concerns around security, data privacy, and accountability are spreading. According to the survey, agentic systems are moving from pilot to production so quickly that traditional risk controls, which were designed [\u2026]<\/p>\n
The post Deloitte sounds alarm as AI agent deployment outruns safety frameworks<\/a> appeared first on AI News<\/a>.<\/p>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-container-style":"default","site-container-layout":"default","site-sidebar-layout":"default","disable-article-header":"default","disable-site-header":"default","disable-site-footer":"default","disable-content-area-spacing":"default","footnotes":""},"categories":[543,1,71,544,72,545],"tags":[3],"class_list":["post-892","post","type-post","status-publish","format-standard","hentry","category-agentic","category-ai-and-ml","category-ai-business-strategy","category-governance","category-governance-regulation-policy","category-policy","tag-ai"],"yoast_head":"\n