AIS

Agentic AI risk

The added risk that comes when an AI system doesn't just answer questions but takes actions — sending emails, moving files, making purchases — covering both tool misuse (it's tricked into using its tools harmfully) and excessive agency (it's simply given more autonomy or access than the task needs.

For small firms

Give an AI agent the same least-privilege scrutiny you'd give a new employee, not a blanket pass because it's "just software."

Related terms

CORE Least privilege Give people and systems only the access they actually need — nothing more. AIS Guardrails Technical controls that keep an AI system's inputs and outputs within bounds. AIMS Human oversight Keeping a person meaningfully able to monitor or override an AI system.
← Back to AI security