The Cyber Risk of Autonomous Workflows
As workflows move from deterministic automation to autonomous action, security must govern intent, provenance, permissions, and behavior. Autonomy is not the problem. Unbounded autonomy is.
Topic
Risk Management
5 essays in this series
Cybersecurity in the Agentic Enterprise
In the agentic enterprise, the security question is no longer only who accessed what. It is what an authorized machine actor is allowed to decide and do right now. Security becomes the enforcement layer for delegated authority.
Why AI Agents Need Contracts, Not Just Prompts
Prompts describe intent. Enterprises need contracts that define authority, boundaries, evidence, escalation, and accountability for delegated machine work. The Agent Delegation Contract is one emerging expression of that need.
Beyond GRC: Turning Signals into Business Decisions
GRC was built to create structure around regulatory requirements and produce evidence of due diligence. What it was not built for is helping organizations make better decisions about risk in real time. The gap between the signal and the decision is where most security programs lose their value.
Risk Transfer Without Understanding: The Insurance Problem in Cyber
The organizations having the most difficulty with cyber insurance are not the ones with the worst security programs. They are the ones with the largest gap between what their policy says they have implemented and what they have actually implemented.