Cybersecurity Awareness Month Special: 10 Questions For Assessing Where You Stand On Agentic AI Security
In this episode of AI Security and the Law, hosts Stephen Lilley and Veronica Glick wrap up Cybersecurity Awareness Month with practical advice on agentic AI security. As companies allow agents to take increasingly consequential actions in their environments—from writing code to moving money—and agentic security incidents are front page news, the hosts offer ten questions in-house lawyers can ask their internal teams to see where the company stands on agentic security and to push it in the right direction. While companies are at different points on the journey of agentic adoption, the questions are intended to provide a starting point for lawyers as they work to ensure that security risks are managed appropriately.
Episode Show Notes
2:18 Are high-risk agentic implementations subject to meaningful scrutiny and testing?
3:03 Have business leaders and engineering teams received training on risk mitigation?
4:22 Does the security team believe that appropriate security controls have been implemented?
5:27 Are the activities of AI agents logged and subject to alerting?
6:16 If the company needed to shut down or mitigate the actions of AI agents, would it be able to do so?
8:05 If an agentic incident occurred tomorrow, would it be possible to quickly assemble the right group of stakeholders, each of whom understands their role and responsibilities?
10:50 Is it broadly understood who has responsibility for critical containment decisions?
11:50 Do we have a documented plan for how to respond to an agentic incident, whether as part of the cyber incident response plan or in another document?
15:20 Have we practiced responding to likely scenarios, either through a formal tabletop exercise or more informal scenario-based sessions?
16:08 Do our contracts mitigate risk to the extent reasonably possible given market realities?
Subscribe
Listen to more episodes of AI Security and the Law.
AI Security and the Law is also available on the following podcast services for your subscription convenience.
