CHAPTER 1The Insider You Built
AI gents are tools, not inevitabilities. As J. Michael Daniel, president and CEO of the Cyber Threat Alliance, has warned, the use of AI agents must be justified by a clear business case and validated against real outcomes, not anticipated promise.1 Yet many organizations skip that discipline entirely. Experimental systems are quietly promoted into operational roles. Prototypes become products before the organization has decided whether the authority being delegated is justified or how it should be constrained.
As AI expert and machine learning (ML) engineer Aditya Jain observes, this transition often happens without ceremony. Systems framed as pilots, helpers, or productivity features accumulate responsibility incrementally until they are performing real work at real scale. Gabrielle Hibbert, tech policy strategist and governance adviser, sharpens the underlying failure further: Organizations should stop to ask whether they need an agentic system or merely want one. That distinction matters because governance failures begin with unbounded authority.
Once authority is delegated, the question is no longer whether a system is experimental. It is whether governance kept pace with it.
The failures described here are not future risks or edge cases. They are already embedded in everyday enterprise operations. You do not need to look for a system labeled “Autonomous Agent” to find agentic risk. Agentic risk emerges anywhere organizations delegate decision ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access