Quick Summary
AI has rapidly integrated into enterprise operations, affecting workflows and core infrastructure. As organizations adopt AI tools, new exposure points emerge, particularly in data, models, applications, and infrastructure. With only 11% of enterprises reporting agentic AI in production, CISOs face governance gaps that can lead to increased risks in security and operations.
The Securityish Brief
AI has transitioned from experimental phases to integral parts of daily operations across various sectors, including engineering, finance, and customer operations. This shift has created new exposure points within businesses, particularly in data management, model behavior, application interfaces, and infrastructure complexity. As organizations increasingly rely on AI tools, the attack surface for potential threats expands significantly.
According to Deloitte’s Tech Trends 2026, only 11% of enterprises have fully integrated agentic AI into their operations, while 38% are still piloting these technologies. The gap between pilot projects and production use highlights the challenges in governance and process rather than technological limitations. This lack of structure can lead to partial automation that complicates workflows instead of enhancing them.
CISOs are advised to incorporate robust policies and controls for AI agents, ensuring that identity, access, and oversight are managed with the same rigor as traditional operational assets. This includes establishing logging, audit trails, and review processes before deploying AI solutions.
The economic landscape of AI is also evolving, with inference costs dropping significantly while overall spending continues to rise due to increased adoption. Organizations are adopting hybrid models that combine cloud, on-premises, and edge computing, each introducing unique security challenges.
As AI-driven attacks become more prevalent, CISOs can leverage AI for defense strategies, such as automated red teaming and adversarial testing, to identify vulnerabilities early in the development process. This proactive approach can help mitigate risks associated with AI integration.
Technology leadership roles are expanding, with CIOs, CTOs, and CISOs increasingly collaborating on AI strategy and governance. This interconnectedness emphasizes the importance of integrating security considerations into the design and implementation of AI systems.
Key Takeaways
- Evaluate your organization’s AI governance framework to identify gaps in oversight and control.
- Implement logging and audit trails for AI systems to ensure accountability and traceability.
- Conduct regular reviews and red teaming exercises to identify vulnerabilities in AI models and applications.
- Monitor the integration of AI into workflows to ensure it enhances rather than complicates processes.
- Collaborate with technology leaders to align AI strategies with security best practices.
Key Terms & Concepts
- Agentic AI: In this article, agentic AI refers to autonomous systems that operate with minimal human intervention.
- Inference economics: Inference economics describes the cost dynamics associated with AI processing and its impact on organizational spending.
- CISO: A Chief Information Security Officer (CISO) is responsible for overseeing an organization’s cybersecurity strategy and implementation.
Read the original article here: https://www.helpnetsecurity.com/2025/12/17/deloitte-enterprise-ai-defense-report/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
