U.S. and Allies Issue Guidance on Secure Deployment of AI Agents
Cybersecurity agencies from the U.S., Australia, Canada, New Zealand, and the U.K. have jointly published guidance on the secure deployment of autonomous artificial intelligence (AI) systems. The guidance emphasizes treating agentic AI, which can autonomously plan and execute tasks, as a core cybersecurity concern. It advises integrating these systems into existing cybersecurity frameworks, applying principles like zero trust and least-privilege access. The document outlines five risk categories, including privilege, design flaws, behavioral risks, structural risks, and accountability. The guidance also highlights the need for cryptographically secured identities for AI agents and human oversight for high-impact actions.