CISO Yearbook April 2026

The New Security Doctrine

CISO Yearbook 2026 Trust, Resilience & Intelligence in the Age of Agentic AI

A New Compact Between Security & Intelligence “The threat landscape does not pause for governance frameworks to catch up. Neither can we.”

Swati Gupta CEO & Managing Editor

Foreword Every edition of this yearbook has been shaped by the moment it captures. This one is shaped by a rupture.

The emergence of agentic AI- autonomous systems that do not merely process instructions but reason, decide, and act- has not simply added a new category to the threat landscape. It has altered the fundamental conditions under which security leadership operates. The perimeter we once defended was physical, then logical, then digital. It is now cognitive: a boundary not between networks, but between sanctioned judgment and unsanctioned autonomy.

Thirty-five of India's most distinguished Chief Information Security Officers have contributed their perspectives to this volume. They write from the frontlines of an industry in genuine transition, not the incremental transition of a new compliance requirement or an upgraded toolchain, but the structural transition of an entire discipline reconsidering its foundations.

What does trust mean when the entity requesting access is not a person but an agent?

What does resilience mean when the attack surface includes the reasoning systems we have deployed in our own defence?

What does intelligence mean when the adversary is generating it at machine speed?

These are not rhetorical questions.

They are the operational questions that CISOs across India and globally are answering, imperfectly, urgently, and without the luxury of waiting for the industry to produce a consensus playbook. The articles, perspectives, and insights gathered here represent that work in progress: the collective intelligence of practitioners who are building the frameworks, testing the boundaries, and establishing the standards that will define security governance in the agentic era.

The theme of this yearbook- Cyber Threats in the Agentic Era: Redefining Trust, Resilience and Intelligence- was chosen not because these concepts are new to security, but because each of them demands redefinition. Trust must now extend to non-human principals whose decision-making cannot be fully observed or predicted.

Resilience must now account for failure modes that emerge from the systems we control, not only from the adversaries who target us. Intelligence must now be generated and acted upon at a tempo that human analysis alone cannot sustain.

The thirty-five voices in this yearbook are united not by agreement on every question, but by a shared seriousness about the stakes. Security leadership has always required the courage to act under uncertainty. The agentic era has raised both the uncertainty and the stakes in equal measure.

We present this yearbook in the conviction that clarity, shared honestly among practitioners, is itself a form of resilience.

Read it as a document of a profession thinking hard, in real time, about the challenges that define it.

Index Shadow AI in the Agentic Era: Employees building and deploying autonomous agents outside IT's visibility

10

The Rise of the Agentic-Era CISO: From Security Guardian to Strategic Orchestrator

12

Redefining Enterprise Security: Trust, Intelligence, and Resilience in the Age of Autonomous AI

14

AI Governance and Cyber Resilience:

16

Navigating Security in the Agentic Era Cyber Trust in the Age of AI:

18

Governance, Accountability and Resilience Agentic AI and Cybersecurity: Navigating the Next Frontier of Digital Risk The CISO as AI Ethicist:

20 22

Navigating the governance grey zones of autonomous decision-making The Ghost in the Code:

26

Navigating the Frontier of AI Criminal Law Cyber Threats in the Agentic Era:

28

How AI is Redefining Trust, Resilience, and Cybersecurity Intelligence From Perimeter Defense to Intent Governance: Securing the Age of Autonomous Systems Cybersecurity Leadership in the AI Era: Cybersecurity Leadership in the AI Era:

30

32

Index Securing the Agentic Future: How Cybersecurity is Evolving with Autonomous Systems

34

AI Red Teaming as a Core Competency: CISOs building adversarial testing programs for agentic workflows

36

Cyber Trust at Machine Scale: Reimagining Cybersecurity in the Agentic Era

40

Cybersecurity in the Agentic Era:

42

Rethinking Defense in an AI-Driven World Cybersecurity as a Governance

44

Imperative in an Era of Systemic Digital Risk Cyber Trust, Autonomy and the Evolving Mandate of the Modern CISO Rethinking Cybersecurity Leadership

46 48

in an Age of Autonomous Threats Third-Party Risk, Multiplied :

50

Managing trust chains when vendors deploy AI agents on your behalf Cyber Trust in the Agentic Era:

54

Governing Intelligence at Machine Scale Cyber Resilience in the Agentic AI Era: Redefining Security Architecture for Intelligent Enterprises Trust, Resilience, Intelligence: A New Cybersecurity Playbook for the AI Era

56

58

Index The Autonomous Sovereignty Doctrine: Cyber Trust in the Agentic Era

60

The Strategic Imperative of AI Driven Cyber Resilience

62

From SIEM to AIMS: The evolution of monitoring infrastructure toward AI-native security tooling

64

Building Secure, Transparent,

68

and Accountable AI Systems at Enterprise Scale The Rise of Autonomous Systems: Redefining Cybersecurity in the Agentic Era Agentic AI and Cybersecurity: Redefining Trust, Resilience and Collective Intelligence AI-Powered Cybersecurity:

70 72 74

Building Autonomous, Adaptive Defense for the Future Enterprise Next-Gen Cybersecurity:

76

Tackling Agentic AI Threats with Resilience & Intelligence Building Cyber Trust as

80

Autonomous AI Systems Begin to Act and Decide at Enterprise Scale Cyber Trust and Resilience in the Era of Autonomous AI Cybersecurity in the Agentic AI Era: Engineering Trust, Resilience, and Intelligent Defense

82

84

Index The Agentic Era: How Autonomous AI is Transforming Cyber Risk and Defense

86

Cyber Trust in the Agentic Era: Rethinking Security, AI Governance, and Resilience in Autonomous Systems

88

Cyber Trust in the Agentic Era: Navigating AI-Driven Threats and Trust Challenges

92

Cybersecurity in the Agentic Era:

94

From Control to Intelligence Securing the Agentic Future: Building Trust, Resilience and Intelligence in the Age of Autonomous AI Cyber Threats in the Agentic Era: Driving Trust, Resilience, & Intelligent Security Leadership Fighting Fire with Fire How security teams are deploying AI agents to hunt AI-enabled threats

96 98 102

CXO TechBOT Executive Masterclass Agentic AI 3.0

Designing Self-Driving Enterprises for the Next Decade

Why This Masterclass?

Agentic AI is no longer just an experimental playground for data scientists - it’s the strategic lever for autonomous decision-making, self-optimizing operations, and intelligent orchestration of enterprise ecosystems.

This exclusive, advanced-level program will help C-Suite leaders move beyond AI pilots and into Agentic AI-driven business architecture, unlocking productivity at scale, operational autonomy, and competitive moats.

Key Learning Outcomes Agentic AI Strategy Playbook – From AI Assistants to Autonomous Decision Units Enterprise Autonomy Blueprint – How to design workflows where AI agents self-initiate, selfcorrect & self-scale Multi-Agent Collaboration Models – Interoperability between finance, supply chain, and customer engagement agents Trust, Compliance & AI Governance – Building an ethical & controllable autonomous enterprise ROI Mapping & Value Realization – Quantifying the business impact of autonomy before board approvals Case Studies – Early movers in BFSI, manufacturing, and smart infrastructure using Agentic AI at scale

Format 4 Weeks | High-Intensity Cohort Live Masterclass Sessions with Industry AI Architects & Transformation Leaders

C-Suite Peer Networking Pods Capstone: Enterprise Autonomy Roadmap for Your Organization

Who Should Attend?

CIOs, CTOs, CEOs, CDOs, Transformation Heads, Strategy Officers, Innovation Leaders

NEXT COHORT STARTS ON

SEATS

22nd May 2026

Limited to 30 Leaders

Hosted by CXO TechBOT | Agentic AI Leadership Series

www.cxotechbot.com

contact@cxotechbot.com

+91-7304670468

Shadow AI in the Agentic Era Employees building and deploying autonomous agents outside IT's visibility Shadow IT gave us unauthorised software. Shadow AI gives us unauthorised decisionmaking. The difference is not one of degree-it is one of kind. A rogue SaaS app holds data. A rogue autonomous agent acts on it.

The phenomenon is familiar enough that security teams have a name for it. Shadow IT-employees procuring and using technology without IT approval - has been a thorn in the CISO's side for over a decade. Cloud storage, personal email, unauthorised SaaS subscriptions: the catalogue of ungoverned tools has grown steadily. But shadow IT, for all its headaches, operated within a recognisable boundary. The software ran; humans decided what to do with its outputs.

That boundary no longer holds. The emergence of accessible, low-code agentic platforms - tools that allow any technically literate employee to build and deploy autonomous AI agents in an afternoon-has created a new category of ungoverned risk that security teams are only beginning to grapple with. Call it Shadow AI: autonomous agents conceived, built, and running in production entirely outside IT's visibility, connecting to enterprise systems with employee credentials, and making consequential decisions at machine speed.

The New DIY Threat Surface The barrier to building an AI agent has collapsed.

Platforms like Zapier, Microsoft Copilot Studio, and a growing ecosystem of no-code agent builders allow employees to wire together an autonomous workflow in hours-connecting their corporate email, CRM, cloud storage, and third-party APIs into a single agent that can read, write, decide, and act without further human input. No procurement. No security review. No IT ticket.

The motivations are entirely understandable. A sales analyst who builds an agent to automatically summarise deal pipelines and send stakeholder briefings is solving a genuine problem. A finance manager who deploys an agent to reconcile invoices across systems is saving real time. The productivity gains are visible and immediate. The security implications are invisible and deferred-right up until they aren't.

The risks compound rapidly. These agents typically run under personal OAuth tokens or API keys issued to individual employees, meaning their access is scoped to the individual's permissions-which are often far broader than any principle of least privilege would sanction. When the employee leaves, the agent may keep running. When the API key rotates, the workflow silently breaks-or silently misbehaves. When the agent is prompted to do something its builder didn't anticipate, no one has written a guardrail to stop it.

10

What Makes This Different From Shadow IT

The Culture Imperative

Security leaders who have managed shadow IT programmes might be tempted to apply the same playbook: discover, inventory, classify, and enforce.

The instinct is correct but the execution is harder.

Shadow IT produced files and logins-artefacts that could be found in CASB logs and access reviews.

Shadow AI produces actions: API calls, data writes, outbound messages, automated decisions. Many of these actions are indistinguishable from legitimate system activity unless you are specifically looking for non-human behavioural patterns.

Ultimately, Shadow AI is not a technology problem.

It is a culture problem wearing a technology mask.

Employees are building autonomous agents because they are solving real problems, and because no one has given them a sanctioned, secure way to do so. The CISOs who will contain this risk most effectively are those who respond not with restriction, but with infrastructure: governed platforms, approved agent frameworks, and security guardrails that are invisible to the user and inviolable to the agent.

There is also a liability dimension that shadow IT rarely raised. When an autonomous agent, acting on an employee's credentials, sends an incorrect communication to a client, modifies a financial record, or exfiltrates data through an unreviewed integration, the question of who bears responsibility has no clean answer in most organisations today. Legal frameworks, insurance policies, and internal accountability structures were not designed with autonomous agents in mind.

Building Visibility Before Building Policy The instinct to respond with prohibition is understandable but counterproductive. Blanket bans on agentic tools will be circumvented as readily as bans on personal cloud storage wereand will drive the activity further underground. The more effective path begins with visibility.

CISOs are beginning to establish lightweight agent registration programmes: a low-friction process by which employees can declare agents they have built, document the systems they connect to, and get basic security review. The goal is not to create a bureaucratic gate but to establish a map. You cannot govern what you cannot see, and you cannot see what employees have no incentive to disclose.

Alongside registration, behavioural monitoring at the API and identity layer is essential. Non-human access patterns-high-frequency API calls, access outside working hours, systematic data reads across multiple records-are detectable with the right tooling. Tagging agent activity through dedicated service accounts rather than personal credentials makes this far more tractable and enables revocation without disrupting the employee's own access.

The workforce is not going to stop building autonomous tools. The question is whether the tools they build will run inside your security perimeter or around it.

The Rise of the Agentic-Era CISO: From Security Guardian to Strategic Orchestrator The future of cyber resilience lies in responsibly harnessing autonomous agents to outpace threats, without losing visibility, accountability, or control.

The role of the Chief Information Security Officer is undergoing a profound transformation. In today’s agentic era, where autonomous AI systems are reshaping both enterprise operations and cyber threats, the modern CISO is no longer just a defender of systems but a strategic orchestrator of resilience, intelligence, and business assurance.

This new archetype blends boardroom influence with deep operational expertise. Having led responses to hundreds of sophisticated cyber incidents, including large-scale ransomware attacks, today’s security leaders bring unmatched real-world experience in containment, recovery, and risk mitigation. Their actions have not only safeguarded digital assets but also preserved billions in business value, reinforcing cybersecurity as a core driver of enterprise continuity.

By embedding principles such as least privilege, continuous verification, and transparency into AI systems, organizations can scale automation without increasing risk exposure. This approach ensures that productivity gains do not come at the cost of security.

Ultimately, the agentic-era CISO represents a shift from reactive defense to proactive, intelligence-led security leadership. These leaders are shaping the future of cybersecurity, where human judgment, supported by machine precision, enables organizations to innovate with confidence while staying resilient against an increasingly complex threat landscape.

At the heart of this evolution lies a pragmatic philosophy: security must deliver measurable outcomes, not just compliance. Modern CISOs are building centralized, high-impact security operations that integrate incident response, threat hunting, and managed security services into cohesive, resilient frameworks. These capabilities extend across IT and OT environments, aligning closely with regulatory expectations and business priorities.

In the agentic landscape, adversaries are already leveraging automation and AI. Forward-looking CISOs are responding in kind; deploying AI-driven threat detection, intelligent incident orchestration, and adaptive defense mechanisms. However, innovation is balanced with strong governance.

Identity, accountability, and auditability remain foundational to ensure that autonomous systems operate within controlled boundaries.

A key focus area is secure-by-design agent enablement.

12

Kinshuk De Head - Managed Security Service Tata Consultancy Services

Kinshuk De is a globally respected cybersecurity leader who exemplifies the modern CISO in the Agentic Era. As Head of Incident Response, Digital Forensics, and Managed Security Services at Tata Consultancy Services, he has led responses to over 150 major cyber incidents worldwide, including more than 50 ransomware attacks- helping organizations avert over $5 billion in potential losses. Known across the industry as the “Ransomware Killer,” Kinshuk combines deep technical mastery with board‑level strategic insight. A Chevening Scholar, CISSP, and Cyber AI Board Advisor, he champions the responsible use of AI and autonomous security operations to outpace adversaries while strengthening trust and resilience. His leadership continues to define how enterprises secure innovation and use of AI at scale.

Redefining Enterprise Security: Trust, Intelligence, & Resilience in the Age of Autonomous AI In the agentic era, cybersecurity is not about reacting to threats, but about building intelligent systems that continuously adapt, anticipate risk, and earn trust in real time.

As cybersecurity continues to evolve at an unprecedented pace, organizations are entering a defining phase often described as the agentic era.

This shift marks a transition from traditional perimeter-based security to Zero Trust architectures and now toward intelligent ecosystems where AI-driven systems actively participate in both enterprise operations and cyber defense.

In this rapidly changing environment, cybersecurity leaders must rethink foundational principles. Trust can no longer be assumed; it must be continuously verified through identity-centric controls, adaptive authentication, and real-time monitoring. Resilience is no longer limited to recovery after incidents but must include proactive anticipation of threats, rapid containment, and the ability to sustain business continuity under persistent attack conditions.

Intelligence now emerges from the synergy between human expertise and artificial intelligence, enabling organizations to detect anomalies faster, predict adversarial behavior, and respond with precision at machine speed.

Building a strong security culture, fostering crossfunctional collaboration, and embedding security into every layer of digital transformation are now critical leadership priorities.

To succeed in the agentic era, enterprises must embrace three imperatives: Zero Trust architectures supported by continuous verification, resilient security frameworks driven by automation and intelligence, and AI-enabled defense systems that integrate human decision-making with machine learning capabilities.

Ultimately, cybersecurity is evolving from a defensive necessity into a strategic enabler of digital trust and enterprise growth.

However, the same technologies that empower enterprises also expand the attack surface. AIdriven phishing, deepfake-enabled social engineering, polymorphic malware, and autonomous attack systems are redefining the modern threat landscape. Cyber adversaries are no longer static actors; they are increasingly dynamic, adaptive, and scalable. This necessitates a fundamental transformation in defense strategies, where AI-enabled security platforms become essential for real-time detection, predictive analytics, and autonomous response.

For modern CISOs, cybersecurity is no longer confined to a technical domain. It is a strategic business function that directly influences trust, brand reputation, and organizational sustainability.

14

Sandeep Kumar Akkimolla Director-Global CISO and DPO ANSR

Sandeep Kumar Akkimolla is a cybersecurity and data privacy leader with extensive experience in global security transformation across telecommunications and enterprise environments. He currently serves as Director and Global Chief Information Security Officer and Data Protection Officer at ANSR, leading enterprise-wide cybersecurity, risk management, and compliance initiatives. Previously at Radisys Corporation, he headed global cybersecurity and data privacy programs, focusing on application security, cloud security, IT infrastructure protection, and regulatory compliance aligned with GDPR, DPA/CDPA, and related frameworks. Earlier, at Capgemini, he held senior leadership roles including deputy CISO and cybersecurity practice architect, driving IAM, GRC, SOC, and data security strategies. His expertise lies in building resilient security architectures and strengthening organizational security posture across global markets.

AI Governance and Cyber Resilience: Navigating Security in the Agentic Era Cyber resilience in the agentic era is not about building higher walls, but about building smarter systems. As autonomous agents take on greater responsibility, organisations must embed governance, accountability, & adaptability into their AI foundations, because resilience is not a feature, it is a design principle.

In the agentic era, the attack surface is no longer just data; it is judgment.

For decades, cybersecurity was fundamentally a human problem: human adversaries exploiting human error in human-built systems. We understood that paradigm. We built frameworks, trained teams, and deployed technologies against it. But the rise of autonomous AI agents - systems that plan, act, and adapt without direct human oversight - has rewritten the threat model entirely.

At ContrailRisks, our work sits at this inflection point. As organisations race to deploy agentic AI for competitive advantage, we are witnessing a new category of risk emerge: the exploitation of AI trust.

Adversarial actors are no longer solely targeting data, they are targeting the decision-making processes of autonomous systems. Prompt injections, manipulated training pipelines, and weaponised model outputs are becoming the new vectors of choice, and the organisations most exposed are those that have deployed intelligence without deploying governance.

This is what I call the “trust inversion problem”.

Traditional cybersecurity taught us to verify everything and assume nothing. Zero trust was a revolution in thinking. But AI agents operate differently: they act with delegated authority, make autonomous decisions, and interface with other agents in ways that create cascading chains of accountability. When that trust is compromised, the consequences propagate at machine speed.

That means AI-native frameworks real- time behavioural oversight of agent activity, explainability and auditability mechanisms, adversarial redteaming of AI decision pipelines, and clear accountability chains extending across the supply chain of models, data, and integrations.

Cyber resilience in the agentic era also demands a fundamental rethink of incident response. When an AI agent is compromised, the blast radius can propagate faster than any human team can react.

The containment protocols, communication frameworks, and recovery playbooks that have served us well for years must urgently evolve to operate at the speed and scale of machine intelligence.

My call to fellow security leaders is clear: the agentic era is not a horizon, it is the present. The CISOs who will define the next decade are those building the governance, resilience, and intelligence infrastructures for a world where the perimeter has dissolved into a network of autonomous systems.

Our role is no longer just to defend. It is to ensure that the intelligence we deploy can be trusted, by the business, by regulators, and by the people who depend on it.

The answer is not to slow the adoption of AI. The organisations that pause will be outcompeted.

The answer is to build governance architectures that treat agentic systems with the same rigour we apply to human identity and access management.

16

Fabrizio Di Carlo Managing Director ContrailRisks

Fabrizio Di Carlo is an accomplished leader and Managing Director of ContrailRisks, where he advises enterprises on digital risk, emerging technologies, and regulatory change. With extensive experience in enterprise security, he partners with boards and executive teams to design resilient, future-ready security architectures.

A recognised expert in AI governance and cyber resilience, he has guided organisations across industries through frameworks such as NIS2, DORA, and ISO 27001, helping them move beyond compliance to embed resilience as a strategic advantage. He specialises in bridging technical security with board-level priorities, with a strong focus on managing risks associated with agentic AI and autonomous systems.

Cyber Trust in the Age of AI: Governance, Accountability and Resilience We spent two decades securing what humans could access. The next decade will be defined by governing what agents are allowed to decide.

In today’s environment, the cybersecurity challenge is no longer limited to protecting systems from external attacks. It is about preserving trust in a world where artificial intelligence is increasingly embedded in decision-making, operations, and business processes.

As AI expands across the enterprise, the real question is not only what technology can do, but how organizations govern its use with clarity, responsibility, and control.

Cyber trust has therefore become a strategic issue. It is built on governance before it is built on tools.

Organizations need clear accountability for AIenabled decisions, strong oversight of data quality, transparent control mechanisms, and the ability to explain how critical outcomes are produced. Without this foundation, speed becomes fragility, automation becomes opacity, and innovation can quickly become exposure.

Resilience also needs to be redefined. In the age of AI, resilience is not simply the ability to recover from a cyber incident. It is the capacity to anticipate new forms of risk, challenge false confidence, and maintain decision integrity under pressure. This requires stronger collaboration between cybersecurity, risk management, compliance, audit, legal, and business leadership. AI risk cannot be isolated in technical teams alone. It must be governed as an enterprise issue.

This is where the role of security leadership is evolving. The modern security leader is not only a defender of infrastructure, but a protector of business judgment. Boards and executive teams now expect more than technical assurance. They expect clarity on risk ownership, confidence in control design, and disciplined oversight of emerging technologies. In that sense, cyber leadership is becoming inseparable from trust leadership.

The future will belong to organizations that understand a simple truth: in the age of AI, competitive strength will not come from adoption alone. It will come from the ability to innovate without losing accountability, resilience, or trust.

18

Teddy Ramanakasina Global Information Security EY

Teddy Ramanakasina is a distinguished leader in cybersecurity, audit, risk, and AI governance with over 25 years of exemplary experience operating at the intersection of technology, control, and executive decision-making. He is known for delivering strategic oversight and embedding robust governance frameworks that address complex digital trust challenges in highly regulated environments. His expertise spans enterprise risk alignment, cybersecurity resilience, and AI governance, enabling organizations to navigate evolving regulatory landscapes with confidence. Teddy is widely recognized for his ability to bring clarity, discipline, and actionable insight to critical decisions, strengthening organizational integrity, accountability, and long-term resilience.

Agentic AI and Cybersecurity: Navigating the Next Frontier of Digital Risk True resilience in the age of AI is the ability to detect, decide, and disrupt threats in real time.

As organizations move deeper into 2026, cybersecurity has entered the agentic era, where autonomous AI agents independently reason, access APIs, and execute complex workflows.

While this shift is unlocking unprecedented efficiency and innovation, it is also introducing a new class of risks known as agentic threats, requiring a fundamental rethink of security strategies.

As autonomous technologies become integral to business operations, organizations that adopt proactive, intelligence-led cybersecurity frameworks will be best positioned to harness innovation while mitigating emerging risks in the agentic landscape.

Unlike traditional cyber threats that depend on human actions or static vulnerabilities, agentic threats exploit system autonomy. Indirect prompt injection, for example, allows attackers to embed malicious instructions within external data sources such as emails or documents. When AI agents process this data, their behavior can be manipulated, leading to data leaks or unauthorized actions. Similarly, non-human identities with excessive privileges create an “agentic identity crisis,” where compromised agents can operate within systems undetected.

To address these challenges, organizations must redefine cybersecurity across three core pillars.

First, trust must shift from identity-based verification to intent-based validation. Implementing just-in-time access and cryptographic attestation ensures that every agent action is traceable and purpose-driven. Second, resilience must focus on real-time interruption rather than recovery.

Behavioral guardrails and automated kill-switches can detect deviations and stop harmful actions instantly. Third, intelligence must become AI-native.

Security operations centers need defensive AI agents capable of monitoring machine interactions and detecting anomalies at scale.

The role of the CISO is evolving accordingly.

Security leaders must move beyond traditional perimeter defenses and design systems that enable trustworthy autonomy. This includes embedding continuous verification, governance, and accountability into AI-driven environments.

20

Nageshwaran C CISO TVS Holdings (TVS Motor Group)

Nageshwaran C is a seasoned Cybersecurity and IT infrastructure professional with extensive expertise in security architecture design, enterprise IT security, and manufacturing OT security. His core strengths include cloud security, application security, mobile security, software supply chain security, and supplier risk management. With a strong technical foundation, he has hands-on experience in security management, network infrastructure, endpoint controls, compliance, and governance. He has been honored with numerous prestigious awards throughout his career, recognizing his contributions across various facets of cybersecurity and technology leadership.

The CISO as AI Ethicist Navigating the governance grey zones of autonomous decision-making Security has always been about protecting systems from harm. Ethics is about preventing systems from causing it. In the agentic era, the CISO sits at the intersection of both-whether they are ready for it or not.

There is a conversation happening in boardrooms, risk committees, and regulatory consultations that the CISO was not originally invited to. It is the conversation about whether the AI systems an organisation deploys make decisions that are fair, explicable, accountable, and aligned with the values the organisation publicly claims to hold. It is, in short, an ethical conversationand increasingly, it is landing on the CISO's desk.

This is not entirely surprising. The CISO has always occupied an unusual position in the C-suite: a technical leader who must translate complex risk into language that boards, lawyers, and regulators can act on. The move into AI ethics governance is, in one sense, a natural extension of that translation role.

In another sense, it represents a profound expansion of scope-one that most security leaders have not been formally trained for, and that most organisations have not formally assigned. The result is a governance grey zone: a space where the ethical implications of autonomous AI decisions are real, consequential, and largely unowned. The CISO is not always the right person to own them. But they are increasingly the person best positioned to see them.

What the Grey Zone Actually Looks Like Consider a few scenarios that land on the desks of CISOs in organisations that have deployed agentic AI at scale. An AI-powered fraud detection system flags a customer account for suspension. The model is accurate on aggregate but has a measurable bias against a specific demographic group-not by design, but because the training data reflected historical patterns.

Is this a security problem?

A legal problem?

An ethics problem?

The answer, of course, is all three-and none of the existing governance structures were built to handle the overlap.

Or consider an autonomous procurement agent that, in the course of optimising vendor selection, systematically deprioritises suppliers from certain geographies based on risk-scoring criteria that were never explicitly reviewed for discriminatory impact.

The agent is doing exactly what it was instructed to do. The instruction itself was never examined through an ethical lens. No one signed off on the values embedded in the scoring model, because no one thought to ask. These are not hypothetical edge cases. They are the foreseeable outputs of deploying optimisation systems at scale without adequate governance frameworks. The CISO who has visibility into how these systems are configured, what data they consume, and what actions they trigger is often the only person in the organisation who can connect the technical behaviour to the ethical outcome.

22

Why This Role Is Falling to the CISO The Chief Ethics Officer, where one exists, typically lacks the technical depth to interrogate model behaviour, audit training data, or assess the downstream consequences of an agent's tool permissions. The Chief Data Officer is focused on data quality and pipeline integrity. Legal is looking for regulatory exposure, not values alignment. The CISO, by contrast, has both the system-level visibility and the risk-framing vocabulary to identify when an autonomous decision-making system is operating outside sanctioned boundaries-even when those boundaries are ethical rather than technical.

The question is no longer only 'can this system be compromised?'

It is also 'what harm could this system cause if it operates exactly as designed?'

Both questions have the same owner.

There is also a structural reason. AI governance frameworks-from the EU AI Act to India's emerging Digital Personal Data Protection rules and sectorspecific guidelines from SEBI and RBI-are placing obligations on organisations to demonstrate that high-risk AI systems are subject to human oversight, bias assessment, and explainability requirements. Compliance with these frameworks requires someone who understands how the systems work at a technical level and can produce documentation that satisfies regulators. The CISO is the most natural candidate.

Building an Ethical AI Governance Muscle CISOs who are stepping into this space are finding that the existing security governance toolkit needs significant extension. Risk registers need new categories: algorithmic bias, unexplainable decisions, autonomous action without audit trail.

Vendor assessment frameworks need new questions: what values are encoded in this model's objective function?

How was the training data reviewed for representational fairness?

What human override mechanisms exist when the model produces an outlier decision?

Model cards and system cards-structured documentation of an AI system's intended use, limitations, performance across demographic groups, and known failure modes-are becoming the ethical equivalent of a security design review.

Some CISOs are beginning to require them as a condition of deployment, alongside the penetration tests and architecture reviews that have long been standard.

Internal red-teaming is evolving too. Where security red teams have traditionally focused on adversarial exploitation-can I trick this system into doing something it shouldn't ?-ethical red teams ask a different but equally important question: can this system, operating entirely within its design parameters, produce outcomes that cause harm?

The two exercises are increasingly being run together, because the boundary between a security failure and an ethical failure in an agentic system is often a matter of perspective, not substance

The Leader the Moment Requires None of this means the CISO should become a philosopher. It means they need to develop fluency in a set of questions that their role has not historically required: questions about fairness, accountability, transparency, and the distribution of harm. These are not soft questions. They have hard operational answers-audit trails, override mechanisms, bias testing protocols, explainability requirements-that map directly onto the security governance structures CISOs already manage.

The CISO who builds this muscle will find themselves at the centre of the most consequential governance conversation of the next decade. The CISO who doesn't may find that the gap between what their AI systems are doing and what their organisation believes they are doing grows quietly, invisibly, and expensively-until it doesn't.

Governance grey zones do not stay grey forever.

They eventually resolve into liability, regulation, or reputational damage. The organisations that navigate them well will be those that had someone paying attention before the colour changed.

A VOICE CAN INSPIRE. A LEADER’S VOICE CAN TRANSFORM. BUILD YOUR IDENTITY WITH CXOTECHBOT

Strong LinkedIn Authority Thought Leadership & Media Presence Executive Brand Strategy & Positioning For CXOs, Founders, Senior Leaders, and Industry Experts who are ready to lead conversations, shape industries, and define narratives.

The time is now. Step forward.

Lead beyond your role. contact@cxotechbot.com

+91 99102 66770

www.cxotechbot.com

CXO TechBOT Briefings is a weekly intelligence service built for the way CISOs actually workshort, signal-rich, and grounded in the Indian regulatory and enterprise context.

THREAT LANDSCAPE SHIFTS

REGULATORY & COMPLIANCE INTELLIGENCE

PEER BENCHMARKS & CISO MOVES

BOARDROOMREADY TALKING POINTS

HOSPITALS

THE WEEK AHEAD

The Ghost in the Code: Navigating the Frontier of AI Criminal Law Cyber Trust in the Agentic Era is no longer a matter of belief- it is verifiable assurance, built on accountability, auditable action, and ethical oversight of every autonomous decision In the Agentic Era, where autonomous AI systems act independently, criminal law faces a fundamental disruption. Incidents like the 2024 Hong Kong deepfake fraud, where $25 million was transferred to AI-generated personas, highlight a critical reality: AI can now be the perpetrator, the decider, and even the victim.

This creates the Great Liability Gap. Traditional legal constructs of intent fail when AI acts without consciousness. Models such as the Innocent Agent framework, Foreseeability doctrine, and emerging Electronic Personhood debates attempt to bridge this gap, yet accountability remains fluid.

Simultaneously, AI-on-AI justice complicates enforcement. Algorithmic decision-making systems and attacks like poisoned training data introduce systemic vulnerabilities, where harm extends beyond individuals to critical infrastructure.

At the core lies the redefinition of Cyber Trust. Trust is no longer implicit; it is engineered through “Proof of Action”- auditable, immutable records of every AI decision. As non-human identities outnumber humans, Zero-Trust architectures must extend to AI agents.

This shift transforms the role of the CISO into a Chief Trust Officer, balancing automation with ethical oversight. The future demands systems where AI drives efficiency, but human judgment remains the final moral authority.

To address the “black box” of AI crime, lawmakers must mandate explainability, codify agentic liability, and enable decisive controls, including the deactivation of rogue AI systems.

The challenge is no longer technological, it is civilizational. The Agentic Era will not be defined by AI’s power, but by our ability to govern it with accountability, transparency, and trust.

The threat landscape is evolving rapidly. From deepfake fraud-as-a-service to self-learning malware and synthetic identities, agentic AI is weaponizing autonomy. These risks are particularly significant for India’s financial ecosystem, where increasing AI adoption introduces the danger of “error cascades”, a single flawed decision impacting thousands of transactions. With 60% of enterprises citing data security as a severe challenge, operational resilience is under strain.

Regulatory responses remain fragmented globally. While the EU enforces the AI Act and the U.S. adopts a market-driven stance, India must accelerate its techno-legal evolution. This includes enforcing AI governance frameworks, investing in sovereign AI models, and redefining liability under an updated legal structure.

26

Sameer Khakhar Deputy CISO Shriram Finance Limited

Sameer Khakhar is an experienced cybersecurity and digital risk executive with a strong track record across banking, financial services, and telecommunications. Currently serving as Deputy Chief Information Security Officer at Shriram Finance, he brings over 18 years of expertise in information security, cyber law, and technology delivery management. He leads multidisciplinary teams delivering cyber and cloud security transformations, incident response, and regulatory compliance.

Passionate about AI, analytics, and automation, he helps future-proof businesses and reduce risk. He has architected security programs, strengthened compliance, mentored professionals, and fosters security-first cultures. Certified CISM professional, advancing skills in GenAI, cloud architecture, data analytics.

Cyber Threats in the Agentic Era: How AI is Redefining Trust, Resilience, and Cybersecurity Intelligence Organizations that harness AI for security will not just survive the next wave of threats, they will define the standard for digital trust.

We are entering the Agentic Era, where autonomous AI agents are no longer passive tools but active participants in digital ecosystems. These systems can negotiate, decide, and optimize outcomes at a speed and scale far beyond human capability. While this evolution unlocks immense business value, it also fundamentally transforms the cybersecurity landscape.

As the Agentic Era reshapes digital enterprises, leaders must focus on building future-ready trust frameworks, resilient architectures, and intelligent security ecosystems. Those who act early will not only mitigate risk but also lead the next wave of secure innovation.

As AI agents become more autonomous, cyber threats are evolving in parallel. Attackers are now leveraging AI-powered malware, adaptive exploit mechanisms, and self-learning attack chains. The nature of conflict is shifting from human-led attacks to machine-driven battles, where speed, intelligence, and automation determine outcomes.

In this new environment, trust can no longer rely on static assurances. Autonomous systems continuously learn, adapt, and act on dynamic inputs, often in ways that are not fully transparent. Organizations must move toward engineered trust that is continuously validated, observable in real time, and embedded directly into system architecture. Trust becomes a living, evolving state built on transparency, explainability, and constant verification.

Resilience, too, must evolve. It is no longer sufficient to recover quickly after an incident. Enterprises must design systems that can anticipate, adapt, and defend themselves autonomously. This includes capabilities such as real-time posture adjustment, self-healing mechanisms, and seamless collaboration between human expertise and machine intelligence. The goal shifts from recovery to uninterrupted continuity.

At the core of this transformation lies intelligence.

Cybersecurity must advance from reactive monitoring to predictive and cognitive systems capable of interpreting behavior, anticipating intent, and simulating attack scenarios. By combining human judgment with AI-driven insights, organizations can create a powerful defense strategy that is both proactive and adaptive.

28

Subash Singh Punjabi CISO & Head Enterprise Architecture Deepak Fertilisers and Petrochemicals Corp. Ltd.

Subhash Singh is an highly accomplished technology leader with over 30 years of impeccable experience in driving digital transformation, Industry 4.0, and cybersecurity initiatives. He specializes in aligning technology with business strategy to enhance operational efficiency, enable innovation, and build resilient, future-ready organizations. With a strong track record across manufacturing, life sciences, and chemicals, he has led large-scale IT programs spanning smart factories, infrastructure modernization, and enterprise applications.

Recognized with multiple industry awards, including SAP Best Run and CISO of the Year, Subash is known for delivering measurable business value, strengthening digital capabilities, and fostering high-performing teams that support sustainable growth and competitive advantage.

From Perimeter Defense to Intent Governance: Securing the Age of Autonomous Systems We spent two decades securing what humans could access. The next decade will be defined by governing what agents are allowed to decide.

The rules of cybersecurity have fundamentally changed, not incrementally, but structurally. For decades, we built our defenses around a simple premise: know who is asking, verify their credentials, and grant or deny access. Identity was the perimeter.

That model is now insufficient.

The emergence of agentic AI, autonomous systems that reason, plan, and execute multi-step tasks across enterprise environments, has introduced a threat surface that traditional security architectures were never designed to address. The question is no longer just who is accessing your systems. It is what an agent is allowed to decide, on whose behalf it is acting, and whether you can trust its reasoning chain in real time.

The organizations that will emerge most resilient are not those that restrict AI adoption out of fear. They are those that architect trust into the agentic layer itself, making autonomous systems not just capable, but accountable.

In an era where intelligent threats evolve faster than human response times, accountability is the new perimeter.

This is the defining security challenge of the agentic era. We have handed decision-making authority to systems that can chain tools, invoke APIs, escalate privileges, and exfiltrate data, not through malicious intent, but through misaligned intent. The threat is not always adversarial. Sometimes it is an agent doing exactly what it was instructed to do, in a context its designers never anticipated.

That reality has reinforced one conviction throughout my work at the intersection of enterprise security and agentic AI: the next generation of cyber resilience requires a new control layer, one that governs behavioral intent, not just access. IAM tells you who can open a door. Guardrails tell an agent not to say harmful things. But neither answers the question every security leader should be asking: what is this agent allowed to decide? That gap is where the next wave of enterprise breaches will originate.

Building trust in the agentic era means rethinking governance from the policy layer up. It means treating AI agents as principals with verifiable intent boundaries, not as tools with user-level permissions. It means designing for auditability, blast radius containment, and real-time behavioral policy enforcement before autonomous systems touch production environments.

30

Vineet Love VP and Deputy Head of Cybersecurity Practice (North America) & Headof Cybersecurity Product - ATLAS DigitalNet.ai

Vineet Love is a cybersecurity leader with over 20+ years of experience building enterprise security practices at the intersection of agentic AI, risk management, and board-level strategy. As Vice President and Deputy Head of Cybersecurity Practice and Head of Cybersecurity Product at DigitalNet.ai, he leads cybersecurity delivery and product strategy for ATLAS, an AI-powered cyber defense platform built for enterprises and federal agencies.

He has advised Fortune 500 boards and C-suite executives across North America, Europe, and Asia on cyber risk, regulatory compliance, digital identity, zero trust, and cloud security. He is recognized for translating complex cyber risk into strategic decisions that leadership teams can act on, building programs that protect enterprises without constraining their ability to grow and innovate.

Vineet holds SABSA SCF, CISSP, CISM, CCSP, CISA, CDPSE, and PMP certifications and has received multiple industry recognitions for his contributions to enterprise cybersecurity leadership.

Cybersecurity Leadership in the AI Era: Building Trust, Resilience and Strategic Impact Cybersecurity is no longer just about protecting systems; it is about building trust that enables innovation, resilience, & sustainable growth.

Cybersecurity has evolved far beyond its origins as a purely technical function. Over the past three decades, it has transformed into a critical business discipline that directly influences organizational strategy, reputation, and long-term resilience. What once resided in server rooms is now firmly positioned in boardrooms, shaping decisions around digital transformation and innovation.

One of the most important lessons for modern CXOs is that true resilience is not built through tools alone, but through leadership mindset and organizational culture. When cybersecurity leaders align risk with business outcomes such as protecting revenue, enhancing customer trust, and enabling growth, security shifts from being perceived as a barrier to becoming a strategic enabler. Empowering employees with the “why” behind security controls fosters a culture where compliance becomes a shared responsibility rather than a mandate.

As artificial intelligence continues to redefine the threat landscape, organizations must adopt a forward-looking approach. Cyber adversaries are increasingly leveraging AI to scale attacks, making traditional reactive defenses insufficient. The future lies in AI-driven governance, predictive risk intelligence, and automation that enhances visibility while reducing operational complexity.

Equally vital is investing in the next generation of cybersecurity talent. Leadership today is defined by the ability to mentor, inspire, and cultivate future leaders who can navigate an ever-evolving digital ecosystem.

Looking ahead, cybersecurity leaders must act as storytellers, strategists, and change-makers. By integrating trust, ethics, and innovation into security frameworks, they can guide organizations through uncertainty and build a secure, resilient digital future.

32

Dr. Lalit Gupta Senior Partner Mitigata

Dr. Lalit Gupta, widely known as “The Cyber Doctor,” is an industry stalwart and seasoned cybersecurity leader with over 30 years of experience in securing critical digital ecosystems across India and the Middle East.

He specializes in AI-driven security operations, governance frameworks aligned with ISO 42001, GDPR, and DPDP, and advanced GRC automation. Dr. Gupta has led initiatives across banking, national infrastructure, and regulatory environments, focusing on building resilient, privacy-first systems on platforms like AWS, Azure, and OCI. Known for blending technology with ethics, he champions security as a trust-driven, business-critical function, enabling organizations to safeguard data, decisions, and digital integrity in the AI era.

Securing the Agentic Future: How Cybersecurity is Evolving with Autonomous Systems In the agentic era, cybersecurity is not just about defending systems, but about building intelligent trust frameworks that allow humans and machines to operate securely at scale.

The emergence of the agentic era, defined by autonomous systems, AI agents, and intelligent automation, is fundamentally transforming the cybersecurity landscape. As enterprises accelerate adoption of cloud, APIs, and AI-driven ecosystems, cybersecurity is evolving from a traditional control function into a strategic enabler of trust, resilience, and innovation.

Ultimately, leadership in this era is defined by foresight, adaptability, and responsibility. The goal is simple yet profound: to leave systems more secure, resilient, and trustworthy than before.

Today’s threat landscape is more complex than ever.

Cyber adversaries are increasingly leveraging AI, automation, and sophisticated techniques such as deepfakes and intelligent malware to exploit vulnerabilities at scale. This evolution requires organizations to move beyond reactive security models and adopt proactive, adaptive, and intelligence-led strategies.

Modern cybersecurity programs must be embedded into the core of business operations. This includes adopting secure-by-design principles, focusing on identity- and data-centric security models, and leveraging AI-powered tools for real-time threat detection and response. At the same time, resilience has become a critical priority.

Organizations must be prepared not only to prevent cyberattacks but also to respond effectively, recover quickly, and ensure business continuity.

Trust, too, must be redefined. In a world where machines increasingly interact with each other, verifying identity, intent, and data integrity is essential. Zero-trust architectures, continuous monitoring, and strong governance frameworks are key to maintaining control in decentralized digital environments.

Cybersecurity leadership is central to navigating this shift.

Leaders must align security strategies with business objectives, communicate risks clearly at the board level, and foster a culture where security is a shared responsibility across the organization.

As the agentic era continues to evolve, organizations that view cybersecurity as a driver of innovation and competitive advantage will be best positioned to thrive.

34

Shrikant Iyer CISO Aditya Birla Health Insurance Company Limited

Shrikant Iyer is a highly accomplished Chief Information Security Officer at Aditya Birla Health, known for leading end-to-end cybersecurity operations and regulatory compliance initiatives.

With exemplary experience in building robust risk management frameworks, he focuses on safeguarding sensitive healthcare data while continuously strengthening organizational security posture.

His career spans product-based sales, cybersecurity consulting, and audit leadership, giving him a unique blend of business and technical expertise. Shrikant has implemented global standards such as ISO 27001 and led audits across PCI DSS and regulatory frameworks, ensuring strong governance and compliance.

Recognized for his strategic approach, he designs audit-ready, business-aligned security programs that deliver measurable outcomes and drive resilience in evolving threat landscapes.

AI Red Teaming as a Core Competency CISOs building adversarial testing programs for agentic workflows A penetration test tells you whether an attacker can break into your system. An AI red team tells you whether your system can be made to break itself. These are not the same question-and in the agentic era, the second one matters more.

Red teaming is not a new concept in security. The practice of putting a dedicated adversarial team against your own defences - tasked with finding what an attacker would find before the attacker does - has been a cornerstone of mature security programmes for decades. What is new is the target.

Agentic AI systems present a fundamentally different attack surface from the applications and infrastructure that traditional red teams were built to test, and the gap between established red team methodology & what agentic deployments actually require is wider than most organisations currently acknowledge.

Red teamers cannot rely on exhaustive enumeration of inputs, because the input space is effectively infinite.

They cannot rely on regression testing alone, because a behaviour that appeared safe in one context may be exploitable in another. And they cannot rely on the standard vulnerability disclosure model, because the 'vulnerability' may be an emergent property of the model's reasoning rather than a discrete, patchable flaw.

The most dangerous failure mode in an agentic system is not the one where the model refuses to act. It is the one where the model acts confidently, at scale, on a subtly manipulated instruction-and no one notices until the damage is done.

The distinction is not merely technical. When you red team a web application, you are looking for vulnerabilities in code: injection flaws, broken authentication, insecure configurations. When you red team an agentic AI system, you are looking for vulnerabilities in behaviour: the ways in which a reasoning system can be manipulated, deceived, or pushed beyond its intended operational boundaries through inputs that are semantically rather than syntactically crafted.

The attacker is not exploiting a buffer overflow.

They are exploiting the model's own judgment.

What Makes Agentic Systems Uniquely Hard to Test Traditional security testing operates on a relatively stable target. A web application behaves deterministically-the same input produces the same output, and a vulnerability that exists today will exist tomorrow. Agentic AI systems are nondeterministic by design. The same prompt, delivered to the same model, can produce different outputs across invocations. The system's behaviour depends not only on its configuration but on the context it has accumulated, the tools available to it, and the subtle variations in how instructions are framed.

This creates a testing challenge that has no direct precedent.

36

Finally, data exfiltration testing assesses whether sensitive information processed by the agent can be extracted through its outputs by a sufficiently persistent adversary.

From Periodic Exercise to Continuous Practice

Building the AI Red Team Programme CISOs who are building formal AI red team capabilities are finding that the function requires a hybrid skill set that does not naturally exist within either a traditional security red team or an AI engineering team. Effective AI red teamers need fluency in adversarial machine learning-the discipline of designing inputs that cause models to misbehave-alongside an understanding of the specific tools, APIs, and orchestration layers that the target agent uses. They also need creativity of a particular kind: the ability to think like a social engineer whose target is not a person but a reasoning system.

The testing programme itself needs to cover at least four distinct attack categories. Prompt injection-the attempt to override an agent's instructions through maliciously crafted inputs embedded in data it processes-is the most widely discussed, but it is far from the only vector. Goal hijacking tests whether an adversary can subtly redirect an agent's objective function through accumulated context manipulation.

Tool abuse testing examines whether an agent can be induced to misuse its own capabilities-calling APIs it should not, escalating permissions it was not granted, or chaining tool calls in sequences that produce unintended effects.

The most important structural shift in mature AI red team programmes is the move from periodic, projectbased testing to continuous adversarial evaluation embedded in the development and deployment lifecycle. Agentic systems are not static-models are updated, tools are added, system prompts are revised, and the data environments they operate in change continuously. A red team exercise conducted at deployment provides a point-in-time assurance that erodes from the moment it concludes.

Leading security organisations are beginning to build automated adversarial evaluation pipelines that run a curated battery of adversarial test cases against agentic deployments on a scheduled basis, flagging regressions in safety behaviour before they reach production. Human red teamers focus their effort on novel attack surface-the creative, contextual work that automation cannot yet replicate-while the pipeline handles the regression baseline.

AI red teaming is not yet a standardised discipline.

There is no universally accepted framework, no established certification, and no consensus methodology. But the organisations that are investing in building the capability now-before regulators mandate it and before adversaries operationalise the techniques at scale-will have a structural advantage that is very difficult to replicate in hindsight. In security, the cost of testing always looks high until you calculate the cost of not testing.

Cyber Trust at Machine Scale: Reimagining Cybersecurity in the Agentic Era The future of cybersecurity is not protection-it is trust, purpose, and responsibility at scale Cybersecurity is undergoing a profound transformation as enterprises step into the Agentic Era- a landscape where autonomous AI systems no longer simply execute commands but interpret intent, learn continuously, and act at machine speed. In this reality, traditional control-centric security models are no longer sufficient. Cyber Trust is being redefined. It is no longer about commanding systems absolutely, but about ensuring intelligent systems operate within defined intent, remain observable, and can be corrected the moment they drift.

In the early era of enterprise security, risk was tangible and accountability clear. Systems were deterministic. Incidents were traceable. Humans remained firmly in control. Today, autonomy introduces a fundamentally different risk dynamic.

Intelligent agents embedded across cloud ecosystems, applications, and supply chains can produce outcomes indistinguishable from cyberattacks- even in the absence of a malicious actor. Failure and attack are converging. Intent is becoming harder to determine. The line between compromise and consequence is blurring.

At scale, this transformation is critical for national and societal resilience. As AI-driven systems power energy grids, telecommunications networks, financial ecosystems, and public infrastructure, security ceases to be merely an enterprise concern. It becomes a public trust mandate. Architectures must sense risk continuously, respond at machine velocity, and ensure autonomy never outpaces accountability.

Ultimately, Cyber Trust in the Agentic Era is not about machines alone. It is about intentional design, ethical governance, and responsible decision-making embedded at the foundation. As autonomy expands, trust becomes the true security boundary- determining whether intelligent systems strengthen institutions and societies or quietly erode confidence over time.

In the age of autonomous intelligence, cybersecurity’s purpose is no longer control. It is trust- engineered, governed, and sustained at machine scale.

This shift demands a new security paradigm- one that moves beyond perimeter defenses toward behavioraware, intent-driven architectures. Security must now govern how systems behave, not merely what they can access. Autonomous agents are emerging as digital entities with identities, privileges, behavioral baselines, and accountability- much like human users.

Static compliance and periodic audits are giving way to continuous risk sensing, adaptive controls, and realtime assurance.

Equally significant is the cultural evolution required.

Cybersecurity can no longer operate as a late-stage gatekeeper. When embedded into design, engineering, and executive decision-making from inception, security becomes an accelerator of innovation rather than a constraint. When aligned to resilience, availability, and trust outcomes, governance becomes shared, transparent, and purpose-driven.

40

Dr. Sriranga Narasimha Gandhi Vice-President & Head of IT Jio Platforms Limited

Dr. Sriranga Narasimha Gandhi is a transformational CISO and cybersecurity visionary with 27 years of experience fortifying enterprises against evolving digital threats. A pioneer in AI-driven security and Zero Trust architecture, he enables organizations to achieve measurable business resilience while accelerating digital transformation.

Armed with a PhD in IoT Security and an MBA in Finance, Dr. Gandhi designs and leads next-generation security strategies across cloud, IoT, and critical infrastructure ecosystems. He has spearheaded complex global programs spanning BFSI, telecom, and government sectors- delivering over $5 million in cost optimization and driving a 40% reduction in fraud through intelligent, riskaligned security frameworks.

A global leader within OWASP, respected author, professor, and international keynote speaker, Dr. Gandhi shapes the future of cybersecurity leadership. He mentors emerging CISOs and serves as a trusted advisor to boards, enterprises, and startups worldwide- championing security that is resilient, compliant, strategically aligned, and demonstrably impactful.

Cybersecurity in the Agentic Era: Rethinking Defense in an AI-Driven World Cyber resilience in the Agentic Era is about building systems and organizations that can withstand, adapt to, and recover from increasingly autonomous and intelligent cyber threats while maintaining trust and continuity.

As we enter the Agentic Era, cybersecurity is undergoing a major shift. The threat landscape is no longer defined solely by human adversaries but by intelligent systems capable of learning, adapting, and acting autonomously.

AI-powered agents are transforming how organizations operate, from automated decision-making and digital operations to intelligent infrastructure management. However, these same technologies also expand the attack surface, enabling adversaries to exploit vulnerabilities through adversarial AI, data manipulation, automated reconnaissance, and large-scale social engineering.

In an era where intelligent systems shape the future of enterprise operations, CISOs must champion a security-first mindset that embeds trust, accountability, and resilience into every layer of the digital ecosystem.

Ultimately, the Agentic Era demands a new leadership approach; one where cybersecurity is not simply a defensive function but a foundation for sustainable digital transformation and intelligent enterprise growth.

In this new paradigm, cybersecurity leaders must rethink traditional defense strategies.

Security can no longer rely purely on reactive controls or perimeter-based protection. Instead, organizations must adopt adaptive security models that integrate AI governance, continuous risk assessment, and resilient system design. The goal is not only to defend against attacks but to build systems capable of detecting anomalies, learning from evolving threats, and responding intelligently in real time.

Digital trust will become the defining metric of organizational resilience. Enterprises must ensure that AI systems operate transparently, ethically, and securely while safeguarding the integrity of data, models, and decision processes. This requires the alignment of cybersecurity with governance frameworks, regulatory standards, and responsible AI practices to maintain confidence among customers, partners, and regulators.

The role of the modern CISO is therefore expanding beyond technology protection.

Today’s security leaders act as strategic advisors to the business, helping organizations balance innovation with risk management.

42

Adeel Shaikh Muhammad vCISO & AI Governance Consultant Adeel Shaikh Muhammad is a multi-awardwinning cybersecurity strategist, vCISO, researcher, solution architect, AI governance advocate, and author of three books on AI and cybersecurity. With over 16 years of experience, he advises organizations across the GCC in government, finance, healthcare, and education sectors. He holds 50+ certifications, including CISSP, CISM, CISA, PMP, CCISO, and ISO 27001 Lead Auditor.

Adeel has led initiatives in GRC, SOC modernization, AI-driven security, and secure digital transformation, combining technical depth with business strategy. A globally recognized speaker, he has presented at 500+ events, including RSA Conference 2025. He is the author of “AI-Driven Transformation of SOCs” and “AI and Us: The Ethical Choices,” and is currently pursuing doctoral research on AI-enabled SOC simplification and next-generation cybersecurity leadership.

Cybersecurity as a Governance Imperative in an Era of Systemic Digital Risk Cybersecurity today is not about preventing every incident, but about governing risk, preserving trust, and ensuring systems can endure failure without losing legitimacy or control.

As digital systems increasingly underpin national operations, economic activity, and essential public services, cybersecurity has evolved from a technical function into a core governance responsibility. Modern cyber risk is no longer confined to isolated incidents or localized outages. Failures today can cascade across supply chains, disrupt public trust, and compromise national resilience. In this context, cybersecurity demands disciplined judgment, accountability, and decision-making frameworks that operate effectively under conditions of uncertainty.

Large-scale digital ecosystems such as government platforms, transportation networks, financial systems, and critical infrastructure face heightened exposure due to their complexity and interdependence. Securing these environments requires more than perimeter defenses or compliance-driven controls. It requires a governance-led approach that integrates cybersecurity into enterprise strategy, risk management, and operational continuity planning.

Policy and framework development also play a critical role. Structured approaches to cyber risk governance, resilience planning, and crisis preparedness enable institutions to respond consistently under pressure. These frameworks must evolve alongside technology, addressing emerging risks related to cloud adoption, data sovereignty, automation, and interconnected ecosystems.

Ultimately, cybersecurity effectiveness is determined not only by tools, but by leadership behaviors, institutional discipline, and collective accountability. Organizations that treat cybersecurity as a governance function rather than an IT expense are better positioned to protect trust, maintain continuity, and operate securely in an increasingly volatile digital landscape.

Effective cybersecurity governance begins with recognizing cyber risk as a business and societal risk rather than a purely technical one. Organizations must establish clear accountability structures, align security programs with mission-critical objectives, and ensure that resilience is designed into systems from inception.

This includes embedding security into architecture decisions, procurement processes, and organizational culture.

At a national and enterprise level, resilience depends on the ability to balance robust protection with operational efficiency. Highly regulated environments such as financial services and public infrastructure demonstrate that strong security controls can coexist with performance and innovation when governance frameworks are well designed. Risk-informed decisionmaking, continuous monitoring, and adaptive security models are essential to managing evolving threats without creating rigidity or operational friction.

44

Ritesh Mahajan Co-Founder & Managing Partner DIGISECURITAS

Ritesh Mahajan is a Visionary cybersecurity leader with over 20 years of exemplary experience in technology consulting, specializing in IT security and risk management. He has led teams to secure client environments. A CISA, CISM, CEH, and ISO 22301 certified professional, he expertly designs and delivers security solutions. His understanding of the threat landscape comes from assessing exposures and implementing mitigation strategies.

He has led security architecture and audit initiatives across multiple data centers and largescale statewide networks, and has played a key role in shaping security policies at the national level. He has also designed security architectures for some of the world’s largest enterprises. Known for his strong problemsolving ability and execution efficiency, he consistently delivers high-impact results and exceeds expectations.

Cyber Trust, Autonomy & The Evolving Mandate of the Modern CISO In an AI-driven world, cyber trust is confidence in outcomes, not just protection & the CISO’s role is to ensure that autonomy, innovation & accountability scale together, so what we build can be trusted not just in India, but by the world.

In the Agentic Era, cyber trust goes beyond protecting systems. It represents confidence in outcomes. As autonomous AI systems make decisions without human intervention, trust becomes the belief that these systems will operate within clearly defined intent, values and constraints, even when no one is watching. Trust is no longer static or binary. It is continuously assessed. When autonomous systems can explain why they acted, adapt as risk increases, and be constrained or shut down when required, autonomy becomes a strategic strength rather than a liability.

Strong governance acts as a force multiplier. By embedding clear intent, accountability and continuous oversight into AI systems, CISOs enable confident innovation. The aspiration is to make cybersecurity foundational to India’s digital transformation and to build systems grounded in resilience, transparency and global trust.

Over the next three to five years, enterprises will confront quieter and more intelligent agent driven threats. Instead of loud disruptions, adversaries will operate at machine speed, learning from defenses in real time and blending seamlessly into legitimate activity. A growing concern will be compromised or misaligned internal agents. These are systems that were trusted and deployed at scale but later behave in unintended ways. The most difficult threats to detect will resemble routine business operations until the impact becomes visible.

As enterprises transition to AI first operating models and hyper automation, the CISO’s role is evolving from security operator to strategic custodian of trust and autonomy.

The focus is no longer limited to protection.

It now includes defining how much decision making authority machines should hold and under what conditions. Modern CISOs translate technical risk into business consequence and ethical intent into enforceable controls. By working closely with boards, regulators and product teams, they ensure that innovation scales responsibly while aligning speed, safety and accountability.

46

Bhavik Dedhia CISO ECL Finance Ltd Bhavik Dedhia is the Chief Information Security Officer at ECL Finance Ltd, bringing extensive experience in cybersecurity, regulatory compliance and enterprise risk management. He specializes in Information Security and Security Operations Center leadership, with deep expertise in threat detection, incident response and vulnerability management across applications, networks and cloud environments.

Bhavik has led end to end security architecture initiatives while aligning controls with industry standards and regulatory mandates. With strong project management capabilities, he drives cross functional collaboration to deliver resilient security outcomes. Committed to building a strong security culture, he aligns cybersecurity strategy with business objectives to ensure sustainable, enterprise wide protection.

Rethinking Cybersecurity Leadership in an Age of Autonomous Threats Cybersecurity is not just about stopping attacks. It is about building trust, shaping culture, and leading responsibly in a world where technology moves faster than humans ever can.

Cybersecurity is entering a period of profound change. The most significant shift is not the emergence of a single new attack technique, but the speed and autonomy with which future threats will operate. Intelligent agents can now execute attacks continuously, learn from failed attempts, and adapt their behavior in seconds. This fundamentally changes how risk must be understood and managed.

In this environment, phishing becomes more personal, intrusions appear more legitimate, and attacks spread faster than human teams can reasonably respond. The challenge for organizations is no longer limited to deploying the right tools. It lies in accepting that human decision cycles operate in minutes and hours, while autonomous systems operate in milliseconds.

Resilience now depends on how effectively organizations redesign detection, response, and recovery to function at machine speed.

Clear ownership, transparent decision-making, and the ability to pause or intervene are essential to prevent small risks from quietly becoming systemic failures.

Strong governance does not require heavy bureaucracy. It requires clarity. When teams understand responsibility, escalation paths, and decision boundaries, they move faster and with greater confidence. Innovation becomes more sustainable when people feel safe questioning decisions and slowing down briefly to protect longterm trust.

Ultimately, cybersecurity leadership in this era is about stewardship. It is about recognizing that security is a human challenge before it is a technical one. Culture, openness, and learning matter as much as controls. The organizations that succeed will be those that treat cybersecurity as a foundation for trust, responsible innovation, and long-term resilience.

One of the most effective ways enterprises have strengthened resilience is by eliminating entire categories of risk rather than trying to manage them endlessly. A clear example is the move toward passwordless authentication. By removing passwords and replacing them with strong, phishing-resistant authentication, organizations can eliminate one of the most common entry points for attackers. This approach not only improves security posture but also simplifies the user experience, proving that security and usability do not have to compete.

As automation and artificial intelligence accelerate, governance becomes a leadership responsibility rather than a compliance exercise. AI is not just technology. It is a choice that shapes outcomes, accountability, and trust. The key question is not what can be automated, but what should be automated, and what that automation changes for people and processes.

48

Kamesh Babu CISO Subex

Kamesh Babu is a Digital Trust leader with over 24 years of exemplary experience across Telecom, Fintech, and CPaaS, specializing in infrastructure management, cybersecurity, data privacy, cloud, and security compliance. He has led large-scale, multi geography deployments spanning presales, solution architecture, delivery, operations, NOC, SOC, cloud, and vendor management.

Kamesh has designed and implemented secure enterprise IT systems, Zero Trust architectures, SSO, MFA, SIEM, and SOAR. He has driven ITGC compliance and certifications including PCI DSS, ISO 27001, and SOC. A proven leader, he drives business growth, operational excellence, financial discipline, and global managed service delivery models across complex product organizations.

Third-Party Risk, Multiplied Managing trust chains when vendors deploy AI agents on your behalf When a vendor's AI agent accesses your systems, you haven't outsourced a taskyou've granted autonomous judgment inside your perimeter. The risk isn't the vendor.

It's every decision their model makes on your behalf.

Not long ago, third-party risk meant reviewing a vendor's SOC 2 report and checking their data processing agreements. Today, it means something far more consequential: determining whether the AI agent a vendor has deployed into your environment will make decisions you would sanction-at a speed and scale no human can supervise in real time.

The shift to agentic AI has fundamentally changed the nature of vendor relationships. Where integrations once moved data between systems on a predictable schedule, agentic deployments move judgment. A vendor's AI agent doesn't just read your CRM-it queries it, interprets the results, decides what to do next, and takes action, often chaining multiple tools and APIs in a single workflow. The trust you once extended to a piece of software now applies to an autonomous reasoning system. That is a categorically different exposure.

The Trust Chain Problem Traditional vendor risk frameworks were built around a relatively simple question: does this third party have appropriate controls over the data we share with them?

The agentic era forces a more complex question: does this third party's AI agent have appropriate boundaries on the decisions it can make inside our environment?

The challenge compounds quickly. Your primary vendor deploys an AI agent that, in turn, calls subagents from specialist providers-a financial data tool here, a document processor there. Each hop in that chain represents a new principal acting with a fragment of your delegated authority. You approved the first relationship. You may have no visibility into the rest. When a breach occurs five hops down the chain, your incident response team is faced with a question that has no clean answer: which agent, running which model, with which instructions, made the decision that caused the harm?

What CISOs Are Doing About It Forward-looking security teams are beginning to adapt. The most effective responses share three common threads.

50

First, agent identity and permission scoping.

Every AI agent operating in your environment should carry a non-transferable identity with explicitly scoped permissions-not inherited from the vendor account that deployed it, but granted directly to the agent itself. This forces a formal record of what each agent is permitted to do, enabling both audit trails and rapid revocation.

Second, behavioral logging at the action layer.

Logging that a vendor's agent authenticated is insufficient. CISOs are beginning to require that every tool call, every API query, and every data write made by an agent be captured in tamperevident logs that sit inside the enterprise's own security infrastructure, not the vendor's. Agentic behavior that isn't logged cannot be investigated.

Third, contractual AI-specific clauses. Standard vendor agreements were not written with autonomous agents in mind. Legal teams are now being asked to include provisions covering model change notifications, sub-agent disclosure obligations, liability in cases of autonomous action, and the right to audit an agent's system prompt and tool permissions. This is new legal territory, and most vendors are unprepared-but the CISOs who are having these conversations now will be ahead when regulation inevitably follows.

The Question You Should Be Asking Today The vendors in your ecosystem are not waiting for your security team to catch up. AI agents are already processing your data, triggering your workflows, and acting inside your perimeter-many of them without explicit security approval because they were deployed through a SaaS feature update, not a formal procurement process.

The CISO's role in the agentic era is not to slow this down-it is to ensure that when a vendor's agent acts on your behalf, it acts within limits you defined, in ways you can see, with accountability you can enforce. Trust chains that run through autonomous systems must be governed with the same rigour as trust chains that run through humans. The tools are different. The stakes are not.

STOP THREATS

BEFORE THEY START Phishing, ransomware, zero-day attacks, and AI-generated threats are bypassing traditional security tools and reaching users before organizations can respond.

Most cybersecurity solutions still work after an attack begins- detecting malware after execution, identifying phishing after delivery, and responding after systems are compromised.

But modern cybersecurity must start before the attack.

Prevention is no longer optional- it is essential.

Security That Works Before the Attack Happens VIPRE provides intelligent, layered protection across email, endpoints, and networks using: Real-time threat intelligence AI-driven detection Behavioral analysis Email security and phishing protection Endpoint and ransomware protection Automated threat response

Don’t Wait for an Attack to Start.

Stop Threats Before They Start.

info@cyberveritas.co.uk

+91 99102 66770

www.vipre.com

Cyber Trust in the Agentic Era:

Governing Intelligence at Machine Scale In the Agentic Era, cybersecurity is no longer about controlling machines, it is about designing trust into every autonomous decision they make.

As enterprises accelerate toward AI-first operating models, cybersecurity is being redefined at its core.

In the Agentic Era, where autonomous systems make decisions without human intervention. Cyber Trust is no longer just about protecting systems and data. It is about trusting the decisions machines make on behalf of the organization.

Cyber Trust today means ensuring that autonomous agents operate within clearly defined guardrails of security, ethics, compliance, and intent. It demands integrity of AI models, transparency in decision logic, continuous monitoring of agent behavior, and the ability to intervene or revoke autonomy instantly.

Trust is earned when intelligent systems remain predictable, auditable, resilient, and accountable even when humans are not in the loop.

This transformation is reshaping the role of the CISO. No longer just an enforcer of controls, the CISO is becoming a trust architect and risk translator, deeply involved in product design, automation strategy, AI governance, and boardlevel decision-making. By embedding governance into systems from inception, CISOs can ensure innovation scales responsibly, with accountability keeping pace with autonomy.

Over the next three to five years, enterprises will face a new class of agent-driven threats that challenge traditional security paradigms.

Autonomous malware that adapts in real time, AIpowered phishing campaigns that personalize social engineering at scale, and supply-chain attacks targeting models, APIs, and data pipelines will become increasingly prevalent. Equally dangerous are subtle threats such as model manipulation and prompt poisoning, where decision-making is influenced quietly without triggering conventional alerts. These risks demand a shift away from perimeter-based defenses toward behavior-centric, intelligence-led security.

To counter this, modern security architectures are evolving rapidly. Static, rule-based controls are giving way to adaptive, continuous trust models.

Identity is emerging as the new control plane, with trust continuously validated across users, machines, workloads, and AI agents. Autonomous systems themselves are treated as high-risk assets, governed through strict controls on data inputs, model access, lifecycle management, and real-time observability. The objective is not to “out-AI” attackers, but to build systems that are resilient by design and capable of failing safely.

54

Himanshu Pandey CISO Quest2Travel

Himanshu Pandey is one of the youngest CISOs in India and a seasoned CISO and cybersecurity risk and compliance expert specializing in SaaS and enterprise environments. An ISO 27001 Lead Implementer and Auditor, he has led 750 plus security audits annually, delivering ISO 27001, SOC 2, and GRC assessments. His expertise spans CISO and vCISO leadership, security audits, risk management, and regulatory compliance aligned with NIST, PCI DSS, RBI, and GDPR. Himanshu has secured SaaS platforms serving over 450 enterprise clients, achieving full compliance. He designs cybersecurity strategies, policies, and KPIs that strengthen resilience, reduce incidents, and build sustained organizational trust across global industries and complex threat landscapes.

Cyber Resilience in the Agentic AI Era: Redefining Security Architecture for Intelligent Enterprises In the agentic era, cybersecurity success will not be defined by how quickly threats are detected, but by how effectively organizations enable intelligent, high-quality decisions at scale The emergence of agentic AI is reshaping the foundations of cybersecurity. Traditional security models, built around perimeter defense and endpoint protection, are no longer sufficient in environments where autonomous agents operate across interconnected systems. These agents execute tasks, make decisions, and interact with multiple tools and data sources, significantly expanding the enterprise threat surface. As a result, the impact of a breach is no longer isolated, it can cascade across entire operational pipelines in real time.

Ultimately, agentic cybersecurity is about precision and preparedness. By automating detection, enrichment, and correlation, AI agents deliver contextrich, decision-ready insights to human leaders. This not only reduces operational fatigue but also enhances the speed and quality of response, enabling organizations to build resilient, future-ready security architectures.

In this evolving landscape, AI agents are becoming integral members of the security ecosystem. They function with defined roles, governed permissions, and audit trails, continuously analyzing data, correlating signals, and generating actionable insights. This shift allows human teams to move away from manual detection and triage, focusing instead on strategic oversight, governance, and high-value decision-making.

Modern security agents are designed to go beyond reactive defense. They proactively synthesize threat intelligence, monitor endpoint coverage, ensure continuous compliance, and model behavioral risks. Additionally, they are transforming third- and fourth-party risk management by enabling continuous monitoring of vendor ecosystems, tracking certifications, and identifying vulnerabilities in real time.

Supply chain security, historically a blind spot, is now being addressed through agentic frameworks that leverage real-time intelligence and automated analysis. These systems provide dynamic visibility into risk exposure without relying solely on periodic assessments.

56

Jayashree Naik India Security Leader Cloudflare

Jayashree Naik is an accomplished cybersecurity and AI strategy leader with over 23 years of exemplary global experience driving enterprise transformation. She specializes in AI governance, cybersecurity engineering, and AI-driven risk management, with deep expertise across cloud, network, and data security. Jayashree has led global CISO organizations, advancing AI-enhanced SOC capabilities, identity and data protection, and resilient GRC frameworks. Known for building “AIfirst” security strategies, she integrates governance, compliance, and innovation to deliver secure, scalable outcomes. Her leadership focuses on aligning AI adoption with business value while ensuring transparency, accountability, and regulatory readiness in rapidly evolving digital ecosystems.

Trust, Resilience, Intelligence: A New Cybersecurity Playbook for the AI Era In the agentic era, resilience is not about keeping threats out-it is about being unbreakable from within. The organisations that will endure are not those with the highest walls, but those with the deepest capacity to absorb, adapt, and rise.

There's something that stays with you after your first real brush with a live breach. Not the alerts, not the war-room chaos, it's the quiet before any of that.

The logs looked normal. The traffic behaved. The window of time when something was already inside, already moving, and nobody knew.

I've carried that lesson for years. Lately, I've had to update it. Because the silence has gotten smarter.

For most of cybersecurity's history, the adversary was human, impatient, error-prone, and traceable.

That friction was, quietly, one of our best defenses.

Then the tooling changed. And then the tooling started changing on its own.

The emergence of Dark LLMs, large language models deliberately stripped of safety constraints and deployed to power offensive operations, represents something genuinely different from prior generations of threats. Early versions were crude: jailbroken consumer models, prompt-injection experiments. But the evolution has been fast and underreported. Today's variants generate contextually adaptive spear-phishing campaigns, write functional exploit code on demand, and power autonomous agents that probe and pivot through networks without a human hand on the keyboard at any stage. The attack surface isn't just bigger, it's agentically alive.

The castle-and-moat model had a good run. Cloud adoption eroded it. Remote work finished it.

Autonomous agents accelerated into the rubble.

When an AI agent executes tasks with delegated authority, querying databases, provisioning resources, and sending communications, the traditional question of "who is this?" becomes almost philosophical. If that process was compromised at the model level or manipulated via upstream prompt injection, no legacy firewall would catch it. Continuous verification isn't a vendor pitch.

It's an acknowledgment of structural reality.

The "assume breach" mindset risks becoming a slogan. But it needs an extension now: assume that what gets in will adapt. Dark LLM-powered tools don't follow fixed playbooks. They respond to defender behavior. If your EDR flags a pattern, an adaptive adversarial model can recognize the shift and change technique. That capability is moving from research papers into active threat intelligence.

Real resilience means continuously learning from what you're seeing and updating faster than the threat updates its approach. Incident response becomes a feedback loop, not a cleanup operation.

The same underlying capability that powers dark LLMs also powers next-generation defense, and organizations that lean into it are building real advantages. Predictive threat modeling, behavioral analysis that distinguishes legitimate AI agents from compromised ones, continuous AI-driven red-teaming: these are becoming production realities, not research concepts. Attackers are scaling through automation. Defenders who match that automation stop playing catch-up and start playing a different game.

All of this comes back to accountability. In too many organizations, security still lives in a silo, warnings go unheeded, remediations get deprioritized, and the gap between what the CISO knows and what leadership acts on only closes after a breach.

The agentic era demands that security stop being a department and start being a design principle. Every AI system deployed, every agent, every model integration, every automated workflow needs to be evaluated not just for what it does when it works, but for what happens when it's compromised or wrong. That's not a security team question alone. It's an executive question that security must help answer.

The silence before the alarm is still there. But it's no longer just an attacker waiting. It's the hum of systems that don't sleep, don't hesitate, and don't need permission to begin.

The organizations that really understand it are building the capacity to survive what's coming. Not by raising higher walls. By becoming structurally harder to break.

That's the work. It's unglamorous, ongoing, and never finished. But it's the only playbook that makes sense anymore.

58

Krishnakumar Kottekkat Fractional CISO | Strategic Advisor Krishnakumar Kottekkat is a seasoned cybersecurity and digital transformation leader with over 25 years of impeccable experience across the GCC, India, UK, and Europe. He has held senior advisory and CISO roles, combining deep technical expertise with strong boardroom communication skills. He specializes in translating cybersecurity risk into business value, positioning security as a strategic enabler rather than a cost center. His expertise spans cybersecurity strategy, GRC, cloud architecture, secure AI infrastructure, and large-scale enterprise transformation. He has led SOC 2, ISO 27001, and GDPR compliance programs, driven smart city and connected ecosystem initiatives, and contributed to global forums on cybersecurity and digital innovation. A certified professional across CISSP, CISM, CCSP, and PMP, he is recognized for building resilient security frameworks and leading high-impact transformation programs.

The Autonomous Sovereignty Doctrine: Cyber Trust in the Agentic Era The future of AI is not just about capability, it is about sovereignty, where trust, accountability, and resilience are built into every autonomous decision.

Technology has always expanded human potential. What is different now is that technology is beginning to act with a degree of autonomy that reshapes how decisions are made, how systems evolve, and how trust is sustained.

Artificial intelligence is projected to contribute trillions of dollars to the global economy over the coming decade. Organizations across industries are embedding AI into core operations from software development and supply chain orchestration to financial decision-making. This momentum is real, and it is transformative.

But transformation at this scale demands responsibility at an equal scale.

In many enterprises today, machine identities significantly outnumber human ones.

Autonomous systems initiate actions, adapt to new data, and influence outcomes without waiting for human instruction. The security models we built over the past thirty years were designed around human behavior. That foundation is no longer sufficient.

The question is whether trust will scale with it.

I believe we need a new framing what I call the Autonomous Sovereignty Doctrine.

It is built on three principles.

First, machine identity must be treated as a primary risk domain, not a secondary one.

Second, autonomous decision systems must be observable and accountable by design.

Third, trust architecture must be resilient across geopolitical and regulatory diversity.

Progress and responsibility are not opposing forces.

They reinforce each other. The most durable innovation ecosystems are those grounded in transparency, accountability, and shared standards.

In the Agentic Era, cybersecurity leadership expands beyond defending infrastructure. It becomes stewardship ensuring that the systems we build remain worthy of the trust society places in them.

If we design for trust from the beginning, autonomy will not diminish human agency.

It will extend it.

We are moving from a world where humans direct systems to one where systems increasingly collaborate, and sometimes act, on our behalf.

At the same time, regulatory approaches are evolving differently across regions. The European Union’s AI Act emphasizes risk-tiered accountability. The United States continues to prioritize innovation-led growth. Nations such as India are aligning AI advancement with longterm national development ambitions under Viksit Bharat @2047. These differences reflect diverse values and priorities but they also require enterprises to design governance models that travel across borders.

The question is no longer whether AI will scale.

It will.

60

Prabhakar Damor CEO Cyber Capsule

Prabhakar Damor is a visionary global cybersecurity leader and business enabler with over 12 years of experience transforming security into a strategic advantage for boards and CXOs. His expertise spans cloud, AI/ML, blockchain, and IIoT, with a strong focus on enterprise security architecture, risk management, and threat intelligence aligned with global frameworks such as ISO 27001, SOC 2, GDPR, and DPDP. He has led large-scale threat modeling, incident response, and cyber resilience initiatives, significantly reducing risk exposure and improving operational efficiency. Prabhakar is known for translating complex cyber risks into actionable business strategies, enabling organizations to innovate securely, strengthen governance, and build trust-driven, resilient growth in a rapidly evolving digital landscape.

The Strategic Imperative of AI Driven Cyber Resilience True digital transformation is not about adopting new technology, but about aligning intelligence, governance and innovation to create resilient enterprises that are trusted, adaptive and built for the future.

Cyber resilience in the Agentic Era extends far beyond traditional defensive protection. It represents a shift toward proactive, autonomous and self healing security models powered by AI agents that can detect, respond to and neutralize threats at machine speed. These intelligent systems are redefining how organizations withstand and recover from cyber incidents, enabling real time decision making that was previously impossible at human scale.

By integrating governance with technical safeguards, enterprises can unlock the transformative potential of AI driven security while preserving trust and control.

In the Agentic Era, resilience is no longer measured solely by the ability to recover. It is defined by the capacity to adapt, respond autonomously and continuously strengthen defenses in a rapidly evolving threat landscape.

Autonomous AI agents strengthen resilience by orchestrating automated threat response, adapting defenses dynamically as attack patterns evolve and significantly reducing the overwhelming volume of false positives that burden security teams. By continuously learning from their environments, these systems enhance proactive threat hunting and drive measurable improvements in overall security posture. Instead of reacting to incidents after damage occurs, enterprises can anticipate and contain threats before they escalate, ensuring continuity and minimizing disruption.

However, the same capabilities that make AI agents powerful defenders also introduce new risk dimensions. Autonomous systems can become attack vectors if misconfigured, misaligned or compromised. This dual reality demands a disciplined and strategic approach to deployment.

Cyber resilience in this era requires organizations to embed strong governance, rigorous oversight and robust security controls throughout the entire AI lifecycle, from design and training to deployment and continuous monitoring.

Secure and effective adoption depends on clearly defined intent, accountability mechanisms and enforceable guardrails that align AI behavior with organizational values and risk tolerance.

62

Dr. Makarand Sawant Director & CTO SEAFB

Dr. Makarand Sawant, popularly known as the “IT Guru,” is a distinguished technologist, researcher, speaker and author with over 26 years of executive and hands on experience in enterprise automation and digital transformation. A PhD in Analytics, he brings deep expertise in AI and ML, Industry 4.0, enterprise IT architecture, GRC frameworks, cybersecurity and risk management. As a Board Member and Independent Director, he advises organizations on emerging technologies, ESG and corporate governance. Recognized with numerous national and international awards, he is ranked among India’s top eminent IT digital leaders and continues to shape large scale, resilient digital enterprises.

From SIEM to AIMS The evolution of monitoring infrastructure toward AI-native security tooling The SIEM was built to answer a question from a different era: what happened, and when? The question the agentic era demands is harder-what is happening right now, what will happen next, and what should we do about it before it does?

For the better part of two decades, the Security Information and Event Management platform has been the centre of gravity for enterprise security operations. The SIEM's value proposition was straightforward: aggregate logs from across the environment, apply correlation rules written by human analysts, and surface alerts when patterns matched known threat signatures. In a world where threats moved at human speed and attack surfaces were bounded by the corporate perimeter, the model was adequate. In a world where agentic AI systems are generating millions of events per hour, executing autonomous actions across distributed environments, and doing so in ways that no human-authored correlation rule was designed to detect, adequate is no longer enough.

The limitations of traditional SIEM architecture in the agentic context are not subtle. Correlation rules are static; agentic threats are behavioural and adaptive.

Log ingestion pipelines were designed for structured, predictable event formats; AI agent activity generates unstructured, context-dependent signals that resist normalisation. Alert triage was designed for human throughput; the volume of events produced by an enterprise with dozens of AI agents in production exceeds what any analyst team can process without prohibitive false positive rates. The gap between what the SIEM was built to do and what the agentic environment requires is not a configuration problem.

It is an architectural one.

The Limits of Rule-Based Detection The core architectural assumption of the SIEM-that threats can be detected by matching observed events against a library of known-bad patterns-was already under strain before the agentic era.

Advanced adversaries have long understood that signature evasion is table stakes: change the tooling, vary the timing, modify the payload, and the rule misses. But the agentic environment compounds this problem in a new way.

An AI agent operating under adversarial influence does not produce events that look like known malware. It produces events that look like legitimate business activity-because the agent itself is legitimate, and its actions are individually permissible.

A procurement agent that has been subtly manipulated into favouring a specific vendor produces procurement events. An email agent that has been induced to exfiltrate data produces email events. The malicious behaviour is not in any individual event; it is in the pattern, the context, and the semantic meaning of a sequence of actions that a correlation rule, by its nature, cannot interpret.

What AI-Native Security Monitoring Looks Like The emerging category that security leaders are beginning to call AI-native monitoring-or, in some formulations, the AI Management and Intelligence System, AIMS-is defined not by a specific product architecture but by a set of capabilities that traditional SIEM platforms were not designed to deliver. The most important of these is behavioural baseline modelling for non-human identities. Where a SIEM tracks what a user account does, an AInative monitoring platform tracks what an agent does-building dynamic baselines of normal agent behaviour across tool calls, data access patterns, action frequencies, and decision pathways, and flagging deviations that warrant investigation.

Equally important is semantic event analysis: the ability to interpret the meaning of an agent's actions in context, rather than simply logging their occurrence. An AI-native platform can assess whether a sequence of API calls represents normal workflow execution or an emergent exfiltration pattern, whether a credential usage event is consistent with the agent's documented purpose, and whether an agent's decision trajectory has drifted from its intended objective function. These are judgements that require contextual reasoning and they can only be performed reliably by a monitoring system that is itself AI-native.

64

The Migration Challenge The transition from SIEM-centric to AI-native monitoring is not a rip-and-replace exercise. SIEM platforms remain valuable for the significant proportion of enterprise security monitoring that does not involve agentic systems-infrastructure events, identity activity, network telemetry from human-operated endpoints.

The practical path forward for most organisations is a hybrid architecture: SIEM for established, ruleamenable monitoring domains; AI-native tooling for agentic workload visibility; and an integration layer that correlates signals across both.

The data strategy question is perhaps the most consequential. AI-native monitoring platforms are only as good as the telemetry they ingest, and the telemetry that agentic systems produce-tool call logs, reasoning traces, inter-agent communication records, system prompt versions-is not yet standardised across vendors. CISOs who are beginning this transition are finding that the first and most important investment is not in the monitoring platform itself, but in the logging and observability instrumentation that gives any monitoring platform something meaningful to analyse.

The shift from SIEM to AIMS is not a product decision. It is a recognition that the nature of the environment being monitored has fundamentally changed-and that the infrastructure built to protect it must change with equal ambition. The organisations that make this transition thoughtfully, and early, will not merely have better tooling. They will have the visibility that makes every other agentic security investment actually work.

-

-

-

-

-

contact@skillzza.com

Building Secure, Transparent, & Accountable AI Systems at Enterprise Scale CyberTrust is earned when autonomous systems are secure, reliable, transparent, and accountable, & when leaders take responsibility for the choices, technology drives on their behalf.

As organizations move into the Agentic Era, cybersecurity is being redefined by the rise of autonomous AI systems that make decisions without direct human intervention. In this environment, Cyber Trust is no longer just about securing infrastructure or applications. It is about confidence that intelligent systems will act safely, predictably, and ethically on behalf of the enterprise.

Cyber Trust is built on several foundational principles. Reliability and robustness ensure that AI systems perform consistently even under unexpected conditions. Strong security and privacy controls protect sensitive data from misuse or unauthorized access. Transparency and explainability allow organizations to understand why systems make specific decisions, which is essential for trust, auditing, and regulatory confidence. Ethical alignment ensures that AI operates fairly, avoids bias, and complies with legal and societal expectations.

Clear accountability and governance define who is responsible for outcomes, while adaptability ensures systems can learn and evolve without compromising ethical or security boundaries.

As enterprises adopt Al-first operating models and hyper-automation, the CISO is evolving from a technical guardian to a strategic leader responsible for trust, governance, and responsible innovation. The role now includes integrating security into AI design, managing AI-specific risks, strengthening data governance, and aligning cybersecurity strategy with business objectives.

Balancing speed with accountability requires governance by design. Clear policies, ethical oversight, continuous monitoring, defined ownership, and ongoing education ensure that automation enhances resilience rather than introducing hidden risk. When governance scales alongside automation, organizations can innovate confidently while maintaining control.

Ultimately, cybersecurity in the Agentic Era is as much a human challenge as a technical one. Trust, culture, and leadership will determine whether intelligent systems become a source of resilience or risk.

At the same time, the cyber threat landscape is evolving rapidly. The most significant challenge over the next three to five years will not be a single attack technique, but the speed and autonomy of AI-driven threats. Intelligent agents can execute persistent attacks, adapt tactics in real time, and bypass traditional defenses.

Enterprises will face highly personalized phishing, deepfake-enabled impersonation, autonomous malware, supply chain compromises, and data poisoning attacks that subtly influence AI decision-making. These threats demand defenses that are behavior-aware, adaptive, and capable of operating at machine speed. This shift is also transforming the role of the Chief Information Security Officer.

68

Manoj Kumar Durbha Associate Director KPMG India Manoj Durbha stands out as a passionate and compassionate strategic leader in Digital Transformation and Technology Risk, bringing over 12 years of rich experience across Security Architecture, GRC, Technology Risk, TPRM, SaaS, and Cloud Security. His unique journey from a dynamic Radio Jockey to a versatile Full-Stack Developer, and ultimately to a respected Cybersecurity Expert, has shaped his distinctive ability to communicate, empathize, innovate, and solve problems with exceptional clarity and depth.

An Alumnus of IIM Calcutta and armed with a Master’s in Psychology, Manoj blends business acumen, human behavior insight, and deep technical expertise to build solutions that are not only strategically sound but also people-centric. His commitment to solving complex cloud and cybersecurity challenges places him at the forefront of modern security consulting.

Manoj plays a pivotal role in empowering Global Capability Centers, guiding them in establishing strong Cyber/Cloud Centers of Excellence and leading transformative digital journeys. His focus spans strengthening GRC frameworks, ensuring Regulatory Compliance, upholding Privacy standards, and defining future-ready Cyber Strategies.

The Rise of Autonomous Systems: Redefining Cybersecurity in the Agentic Era As AI agents begin to think, decide, and act on our behalf, the true measure of security will not be control, but our ability to ensure trust, resilience, and accountability at every moment.

We stand at an inflection point. Artificial intelligence is no longer a tool we wield- it is becoming an actor in its own right. Agentic systems today schedule meetings, execute transactions, manage cloud infrastructure, and make decisions at machine speed, often without a human in the loop. This is not the future we once imagined; it is the present we must now secure.

For those of us who have spent careers in cybersecurity, the agentic era does not simply introduce new attack surfaces- it fundamentally dismantles the assumptions on which our trust models were built. We designed security around human actors: identities we could verify, intentions we could interrogate, and decisions we could audit after the fact. Agents do not fit neatly into this paradigm. They inherit permissions, chain actions across systems, and operate at a velocity that renders traditional oversight not just difficult, but obsolete.

And intelligence? Intelligence must become anticipatory. The same AI capabilities that power our agents will power our adversaries. Winning that race requires us to not only deploy smarter defences, but to cultivate a security culture that treats AI governance as a strategic imperative- not a compliance checkbox.

The agentic era will reward those who build with intentional trust, design for adaptive resilience, and lead with intelligence that is always one step ahead.

That is the standard we must now set.

The question I keep returning to is this: how do we build trust in something that acts before we can ask it why?

My answer is that trust in the agentic era cannot be granted- it must be continuously earned and architecturally enforced. We need to move beyond perimeter thinking and embrace what I call behavioural sovereignty- the principle that every autonomous agent must operate like a trusted employee, with a clear mandate, defined boundaries, and a transparent trail of its actions.

Trust becomes a living attribute, not a one-time credential.

Resilience, too, must be reimagined. It is no longer sufficient to recover from a breach; organizations must be designed to detect when an agent has been manipulated mid-mission- when the compromise is not a system going down, but a system silently going wrong. That subtlety is the defining threat of our era.

70

Muzammil Ahmed Shaikh Fractional CISO Muzammil Ahmed Shaikh is a visionary Chief Information Security Officer (CISO), Independent Cybersecurity Advisor, and Enterprise Risk Leader with over 18 years of experience in strengthening organizational security and driving resilient digital transformation. He has successfully partnered with global enterprises to build robust governance frameworks, transform underperforming cybersecurity functions, and enhance operational excellence.

Muzammil has led large-scale security programs across organizations like ANB and Capgemini, managing global assets, optimizing risk and compliance, and reducing audit gaps. A recognized thought leader and ISACA Platinum member, he holds certifications including CCISO, CISA, CISM, and ISO 27001 Lead Auditor, delivering secure, scalable, and business-aligned cybersecurity solutions.

He is currently open to leadership opportunities and available immediately, bringing his cybersecurity expertise and strategic vision to organizations looking to build resilient and futureready security programs.

Agentic AI and Cybersecurity: Redefining Trust, Resilience & Collective Intelligence In the agentic era, cybersecurity is no longer about defending systems in isolation; it is about building adaptive ecosystems where trust is continuous, resilience is proactive, and intelligence is shared.

As artificial intelligence evolves into autonomous, decision-making systems, a new cybersecurity landscape is emerging. Often described as the agentic era, this phase is marked by AI agents that can independently analyze, decide, and act across business, government, and personal environments.

While this transformation unlocks speed, efficiency, and innovation, it also introduces a new class of cyber threats that are more dynamic and harder to predict.

As cyber risks grow more complex, organizations must view cybersecurity as a living, adaptive ecosystem.

Success will depend on embracing change and building systems that are not only secure but also intelligent, collaborative, and resilient by design.

Traditional attack surfaces are rapidly expanding.

Cyber adversaries are no longer targeting static systems alone; they are focusing on intelligent, adaptive networks that continuously learn and evolve. These systems, while powerful, can create new vulnerabilities as they interact across platforms and make autonomous decisions in real time.

In this shifting environment, trust must be reimagined. It can no longer rely on fixed credentials or one-time verification. Instead, trust becomes continuous and contextual, evaluated through both identity and intent. Zero-trust architectures, enhanced by AI-driven monitoring, ensure that every interaction is verified dynamically, reducing the risk of unauthorized access.

Resilience, too, is undergoing a transformation.

Previously defined by the ability to recover after an attack, resilience in the agentic era is about proactive adaptability. Modern systems must anticipate threats, self-correct, and evolve during disruptions. The goal is no longer just recovery, but continuous strengthening in the face of challenges.

Equally important is the shift toward collective cyber intelligence. Security is no longer confined to isolated systems. By sharing insights across networks, AI agents can identify patterns, predict threats, and respond with greater speed and precision. Intelligence is now measured by how quickly and accurately systems can act, rather than the volume of data they process.

72

Prasannakumar G K CISO Rakuten India

Prasanna Kumar G K is a seasoned cybersecurity leader with over 15 years of exemplary experience in delivering secure, scalable technology solutions aligned with business objectives. He specializes in vulnerability management, risk mitigation, Microsoft cloud security, O365 security controls, and Azure architecture. A certified Lead Auditor for ISO 27001:2022, he brings extensive expertise in third-party risk assessments and compliance audits across PCI, SOC, and CCPA frameworks.

Proficient in leading security tools and GRC platforms, Prasanna collaborates closely with stakeholders to strengthen governance and operational resilience. He drives internal and external audits, manages security incidents, and leads risk assessment and mitigation strategies, ensuring robust information security and regulatory compliance across organizations.

AI-Powered Cybersecurity: Building Autonomous, Adaptive Defense for the Future Enterprise True cybersecurity leadership lies in transforming security from a barrier into a catalyst, where intelligent defense systems empower innovation while safeguarding trust.

The cybersecurity landscape is undergoing a dramatic shift with the rise of AI-driven threats.

Autonomous “Living-off-the-Land” agents are emerging as a major risk, using legitimate tools and native services to move laterally without leaving traditional forensic traces. Their ability to mutate code in real time makes static defenses ineffective.

At the same time, compromised internal AI agents introduce the “confused deputy” problem, where attackers exploit indirect prompt injections through emails or documents to manipulate high-privilege systems.

The evolving role of the CISO is centered on enabling innovation while ensuring security. By embedding AIdriven guardrails into business processes, organizations can accelerate growth without compromising trust. Establishing ethical frameworks for AI in security will be critical for the future.

Hyper-personalized deepfake operations are further eroding trust, enabling real-time impersonation to authorize transactions or extract sensitive data. Additionally, multi-agent cascading failures can disrupt entire systems by compromising a single agent, triggering complex and opaque failure chains.

Organizations are now shifting toward Adaptive Security Architectures that are proactive, autonomous, and continuously evolving. Modern Security Operations Centres are becoming increasingly autonomous, enabling real-time detection and response through AI-driven automation. Behavior-based monitoring identifies anomalies such as privilege escalation and unusual access patterns, while automated systems isolate threats instantly. Continuous breach and attack simulations proactively uncover vulnerabilities.

Security-by-design principles are embedded into development pipelines, and Zero Trust frameworks ensure dynamic, context-aware access control.

Transformative initiatives such as Autonomous SOC, Zero Trust Network Access, and Just-in-Time Privileged Access Management are redefining resilience. Advanced email security systems now leverage agentic defense to detect, quarantine, and neutralize phishing threats autonomously.

74

Sayed Tasneem Group Head(Cyber Defence) Mahindra Group

Sayed Tasneem is a visionary cybersecurity leader with over 24 years of impeccable experience in driving digital resilience across automotive, manufacturing, power, and steel sectors. Currently serving as Group Head of the Cyber Defence Centre at Mahindra & Mahindra, he specializes in building global security strategies aligned with frameworks such as NIST, COBIT, and ISO 27001.

Renowned for crisis leadership, including ensuring business continuity during the 2005 Mumbai floods, he has evolved into a visionary expert in countering ransomware and securing IoT and industrial environments. His approach combines Agentic AI SOC capabilities with strong governance and a people-centric mindset, fostering a culture where security is a shared responsibility and a driver of sustainable business advantage.

Next-Gen Cybersecurity: Tackling Agentic AI Threats with Resilience & Intelligence Agentic AI is redefining both the scale of cyber threats and the speed of defense, making it imperative for organizations to build trust, resilience, and intelligence into every layer of their security strategy.

The rapid rise of Agentic AI is transforming the cybersecurity landscape, introducing both powerful defensive capabilities and a next generation of sophisticated threats. As autonomous systems increasingly operate with minimal human intervention, organizations must reassess traditional security models to address risks that evolve in real time.

Agentic AI is enabling advanced forms of cyberattacks. Autonomous malware can now adapt dynamically to evade detection, while prompt injection techniques are being used to manipulate AI systems and extract sensitive data. At the same time, AI-driven social engineering is becoming more convincing, with hyper-personalized phishing campaigns and deepfakes targeting individuals and enterprises. Cybercriminals are also leveraging automation for large-scale reconnaissance and rapid data exfiltration, leading to complex ransomware demands and identity fraud scenarios.

By leveraging machine learning for proactive vulnerability assessments and anomaly detection, organizations can identify and neutralize threats at machine speed.

Finally, a layered defense strategy remains essential. Combining behavior-based technologies with traditional security controls strengthens overall protection. Alongside these measures, continuous user training, attack surface management, and realtime vulnerability identification must remain core components of a robust cybersecurity framework.

To counter these evolving threats, organizations must adopt a proactive and strategic approach to cybersecurity. Redefining trust and governance is critical. Zero Trust architectures should be implemented to verify every interaction, ensuring that both human and machine identities are continuously authenticated. Strong governance frameworks are essential to maintain transparency, accountability, and human oversight in AI-driven environments.

Building resilience is equally important. Security-bydesign principles must be embedded into systems from the outset, supported by continuous behavioral monitoring and automated containment mechanisms such as kill-switches to manage rogue agents. This shift ensures that systems can respond and adapt to threats without disruption.

Enhancing cyber intelligence through AI-on-AI defense mechanisms will also play a key role.

76

Ramanand Jha Managing Director & CEO Komorebi Global Consultancy LLP

Ramanand Jha is an accomplished Chartered Accountant, Certified Chief Information Security Officer (CCISO), and Certified Ethical Hacker (CEH) with over 20 years of exemplary experience in risk management, cybersecurity, internal audit, and forensic investigations.

Notably, he is the first Chartered Accountant in India to possess both CCISO and CEH certifications, underscoring his unique blend of financial and cybersecurity expertise.

He holds multiple certifications, including ISO 27001:2022 Lead Auditor and ISO 31000, reflecting his strong foundation in governance, risk, and compliance frameworks.

Ramanand has worked with leading organizations such as Havells India, Varroc Group, and Samvardhana Motherson Group, driving enterprise risk, compliance, and digital transformation initiatives. His expertise spans SOX and SOC audits, forensic investigations, data analytics, and cybersecurity architecture across cloud, network, and application layers.

He is known for building high-performing teams, implementing robust governance frameworks, and advising leadership and boards on risk, compliance, and strategic security initiatives.

There Are Mountains You Cannot Climb Alone.

Cybersecurity has become one of them.

The threats are sharper. The regulators are sterner.

The board's questions have changed.

And the loneliest seat in the enterprise has only grown lonelier.

There is a better way to climb.

INTRODUCING

THE CYBER SHERPA COUNCIL An invitation-only forum where India's senior security leaders guide each other through the climb.

Coming Soon — This July Founding cohort opens for invitations and peer nominations.

Built for the Climb India's CISOs Are Already On. Generative AI has weaponised phishing. Deepfakes are turning up in CFO calls. Agentic systems are reshaping the enterprise-and its attack surface. The DPDP Act is live.

SEBI's CSCRF deadlines are landing. RBI's cyber resilience expectations have never been higher. The board is asking questions you cannot answer alone.

The Cyber Sherpa Council is built for exactly this moment.

WHAT YOUR MEMBERSHIP INCLUDES QUARTERLY SUMMIT GATHERINGS

THE AI & AGENTIC THREAT WORKING GROUP

THE REGULATORY DECODER

THE BOARDROOM PLAYBOOK

THE COUNCIL DISPATCH

THE SHERPA CHANNEL

THE ANNUAL EXPEDITION

THE INCIDENT WAR ROOM

The founding cohort is being assembled now.

Membership is by invitation or peer nomination. Founding members shape the Council's first year and are recognised in perpetuity.

The Cyber Sherpa Council | A CXO TechBOT initiative | Founding cohort opens this July

Building Cyber Trust as Autonomous AI Systems Begin to Act & Decide at Enterprise Scale Cyber Trust is achieved when autonomous systems are transparent, accountable, and governed with the same discipline we expect from human decision makers.

As enterprises enter the Agentic Era, cybersecurity is being reshaped by autonomous AI systems that can observe, decide, and act without constant human involvement. In this environment, Cyber Trust takes on a deeper meaning. It is no longer limited to protecting systems and data. It is about confidence that intelligent machines operate in alignment with human intent, ethical boundaries, and clear accountability.

Cyber Trust is built when organizations can clearly explain three things: what an AI system did, why it took that action, and who remains responsible for the outcome. As autonomy increases, trust cannot be assumed or implicit. It must be deliberately engineered through explainable decision models, auditable systems, and strong governance frameworks. Trust in the Agentic Era depends as much on visibility and oversight as it does on technical security.

This shift is redefining the role of the CISO. Security leaders are evolving from compliance focused guardians into architects of digital trust. Their responsibility now spans technology, governance, and ethics. In AI first enterprises, CISOs play a critical role in enabling innovation while ensuring that automation strengthens resilience rather than introducing hidden risk. By embedding governance into design, promoting transparency, and investing in education, organizations can adopt AI with confidence and control.

The cyber threat landscape is also evolving rapidly.

Over the next three to five years, enterprises will face threats driven by self learning and adaptive AI agents that can mimic trusted behavior, bypass static defenses, and operate at machine speed.

These include highly personalized phishing campaigns, synthetic identities that evolve over time, coordinated misinformation, and intelligent malware that adapts in real time. One of the most difficult challenges will be intent detection, distinguishing legitimate automation from malicious agents operating under disguise.

To counter these risks, organizations are moving toward adaptive security architectures that defend autonomously. Modern security environments rely on behavior based detection, real time analytics, and AI powered response mechanisms that can contain threats without waiting for manual intervention. Zero trust models, continuous validation, and explainability layers are becoming foundational, ensuring that every automated action remains accountable.

80

Rishabh Chhajer Vice President (IT & Cybersecurity) ALLEN

Rishabh Chhajer is an enterprise technology leader with 15+ years of exemplary experience scaling IT operations, infrastructure, applications, and cybersecurity. He believes technology at scale depends on ownership, discipline, and leadership. Currently Vice President – IT & Cybersecurity at ALLEN, he leads IT operations, service desk, data centers, cloud platforms across Azure, AWS, and GCP, and enterprise applications including Oracle, SAP, Salesforce, and ServiceNow. He has built environments supporting 500+ branches and mission-critical systems.

Previously, he held leadership roles at Byju’s, IndiaBulls, Ola, GE Digital, and Oracle.

Recognized as CIO100 Innovator, CSO100 Disruptive 100, and CISO of the Year 2025.

Cyber Trust and Resilience in the Era of Autonomous AI Cyber Trust in the Agentic Era is earned when autonomous systems operate reliably, ethically, and transparently, and when leadership balances innovation with accountability.

As enterprises accelerate the adoption of autonomous AI systems, cybersecurity is undergoing a fundamental transformation. In the Agentic Era, Cyber Trust is no longer just about protecting networks or data, it is about confidence in the accountability, security, authenticity, reliability, and ethical operation of AI systems that make decisions independently.

Data privacy, governance frameworks, and compliance with industry-specific regulations are essential to ensure that AI agents operate safely and ethically while handling sensitive information.

They ensure ethical AI use, guide governance, and transform cybersecurity into a strategic enabler, building confidence that the organization can scale securely.

Ultimately, cybersecurity in the Agentic Era is about building trust, between systems, people, and business outcomes. Resilience, ethical oversight, and adaptive governance will determine whether AI becomes a source of competitive advantage or operational risk.

The cybersecurity landscape is shifting rapidly as AI penetrates all data-driven processes. Enterprises will face highly sophisticated AI-driven threats, including adaptive ransomware, AI-powered malware, and hyper-realistic social engineering attacks leveraging deepfake audio and video. Autonomous agents will increasingly orchestrate attacks that dynamically adjust to bypass existing security controls, creating a level of speed and scale that challenges traditional defenses. Organizations must prepare for a future where AI not only defends but also attacks.

To counter these intelligent threats, organizations are evolving their security architecture. Robust foundational security controls, continuous monitoring, and the integration of AI-powered defense systems are becoming standard. Approaches such as zerotrust network access (ZTNA), predictive analytics, threat hunting, and behavioral analytics are being deployed to detect anomalies and respond proactively. By combining AI capabilities with human expertise, enterprises can maintain resilience in an environment of rapidly evolving risks.

In AI-first, hyper-automated organizations, the Chief Information Security Officer (CISO) is transitioning from a technical security guardian to a strategic business leader. Beyond maintaining a strong security posture, CISOs now act as partners in business decision-making, enabling innovation while balancing risk.

82

Sandeep Jamdagni Head of IT & Security Central Park

Sandeep Jamdagni is an experienced and resourceful IT leader with a proven record of driving digital transformation across diverse business verticals. He defines IT vision and strategy to maximize business value through robust, sustainable technology programs. His strengths include IT strategy, information and data security governance, cloud migrations, data center consolidation, budgeting, and highperformance team leadership.

He leads IT infrastructure, networks, service delivery, operations, ISMS/PIMS audits, and enterprise ERP-CRM platforms, along with analytics-driven corporate applications. An MBA from Management Development Institute, Gurgaon, he currently drives IT strategy, operations, and information security for Central Park and BAXY Group, ensuring security posture.

He has led security audits for more than ten state data centers and statewide networks, and designed network and security architecture for India Post across 28,000 locations. Known for problem solving and efficiency, he consistently delivers quality results and exceeds expectations.

Cybersecurity in the Agentic AI Era: Engineering Trust, Resilience, & Intelligent Defense Cybersecurity at machine speed demands more than defense, it requires adaptive intelligence, accountable systems, and trust by design.

Cybersecurity is no longer limited to protecting systems; it is now about engineering trust in a world where machines make autonomous decisions. As organizations enter the Agentic AI era, the focus shifts from whether systems will act independently to how safely, transparently, and responsibly they operate. This transformation is redefining the role of cybersecurity leaders, especially CISOs, who are evolving into custodians of digital trust and resilience at scale.

Balancing innovation with governance remains essential. Responsible AI frameworks, risk-based controls, human oversight, and continuous auditability ensure that AI adoption is both secure and scalable.

Ultimately, the future of cybersecurity lies in embedding trust into every digital interaction, creating systems that are secure, ethical, and resilient by design.

Cyber trust now extends beyond users and processes to include autonomous agents. These systems must be explainable in their decisions, resilient against manipulation, and accountable for outcomes. Trust is no longer static or assumed; it must be continuously verified through dynamic validation frameworks and real-time monitoring.

At the same time, the threat landscape is becoming more complex. Emerging risks include AI-driven phishing, deepfake impersonation, autonomous attack agents, and data or model poisoning. These threats operate at machine speed, forcing organizations to move from static defense models to adaptive, intelligence-led security strategies.

To address this shift, enterprises are adopting AInative security architectures. Zero Trust principles are being extended to machines and AI agents, while autonomous Security Operations Centers leverage predictive intelligence for faster detection and response. Continuous validation of models and data pipelines, along with the integration of security into the AI lifecycle through MLSecOps, is becoming critical.

The role of the CISO is also expanding. Today’s leaders act as strategic advisors, enabling secure innovation while governing AI risks and ethics. Their success is measured not only by preventing incidents but by empowering organizations to innovate with confidence.

84

Saravanakumar Krishnamurthy Group CISO Vivriti Capital

Saravanakumar Krishnamurthy is an highly accomplished cybersecurity and information security professional with over 20 years of impeccable experience across telecom, automotive, banking, healthcare, biotech, and semiconductor sectors. He specializes in network security consulting, governance, risk and compliance, and building enterprise security roadmaps and operating models.

Saravanakumar has deep expertise in designing and implementing secure cloud and on-premise architectures, along with driving digitalization and automation initiatives. He has led internal and external audits, incident response, fraud detection, and business continuity planning.

Certified in ISO 27001, digital forensics, and multiple security frameworks, he is recognized for building robust information assurance frameworks aligned with global industry standards.

The Agentic Era: How Autonomous AI is Transforming Cyber Risk & Defense Securing the future is not about predicting threats; it’s about building systems that can withstand the unknown.

We stand at a decisive inflection point in the history of cybersecurity. The emergence of agentic AI, autonomous systems capable of reasoning, planning, and acting across enterprise environments without continuous human oversight, has fundamentally altered the threat landscape in ways that traditional security architectures were never designed to address. For today’s CISOs, this is not a distant horizon; it is the operational reality of right now.

By blending advanced technical guardrails with a deep understanding of AI behavior, we transform security from a cost center into a competitive advantage.

Traditional cyberattacks focused on exploiting software vulnerabilities to gain access. In the Agentic Era, the most dangerous threat is agentic hijacking.

Adversaries now target the decision-making logic of AI. By manipulating data inputs or the “reasoning” pathways of an agent, a hacker can convince a system to bypass security protocols without ever triggering a traditional alarm. AI agents now browse, write, execute, communicate, and orchestrate, often chaining dozens of actions autonomously within milliseconds. Every capability that makes them powerful in the enterprise also makes them a highvalue target for exploitation.

Security must evolve from identity-based trust to continuous validation. Trust becomes a dynamic process, verifying intent, monitoring behavior, and ensuring alignment with purpose. Identity governance must now extend to non-human principals such as AI agents, APIs, and orchestration pipelines, with the same rigor applied to privileged human users.

The intelligence pillar must evolve from reactive to anticipatory. The agentic threat surface is vast, dynamic, and deeply contextual. Security leaders must invest in AI-native threat intelligence platforms capable of correlating signals across agentic pipelines, supply chains, and multi-cloud environments simultaneously.

The CISO of 2026 is not merely a defender; they are a strategic intelligence officer, translating complex threat signals into board-level decisions and business continuity plans. Resilience in this new era is measured by our ability to maintain integrity under pressure.

86

Dr. Shankar Venkatesan CISO & Vice President - IT Violin Technologies Private Limited

Dr. Shankar Venkatesan is an industry veteran with over three decades of impeccable experience in leading IT and Information Security in the manufacturing and EMS sectors. He specializes in aligning technology strategy with business priorities, driving digital transformation, strengthening cybersecurity frameworks, and enhancing enterprise SAP ecosystems. His expertise includes multi-cloud infrastructure, Zero Trust architecture, CloudSec, ISO 27001 practices, and MES integration, ensuring system resilience, availability, and business continuity. Recognized with accolades such as CIO Next 100 and CISO 100, he holds certifications including ITIL, CEH, CISM, CISA, and CDPSE, and is known for building secure, efficient, and future-ready organizations.

Cyber Threats in the Agentic Era: Rethinking Security, AI Governance, and Resilience in Autonomous Systems As AI reshapes the threat landscape, security leaders must evolve from defenders to orchestrators of trust and resilience.

Cyber trust in the Agentic Era is no longer theoretical, it is a daily operational reality. As AI agents began making autonomous decisions within enterprise environments, traditional cybersecurity frameworks quickly proved inadequate. The shift has not been toward simpler models, but toward a more complex landscape where the boundaries between trusted and untrusted behavior continuously blur.

Ultimately, leadership in this era is defined by foresight, adaptability, and responsibility. The goal is simple yet profound: to leave systems more secure, resilient, and trustworthy than before.

One critical lesson has emerged: you cannot govern what you cannot observe. Modern security strategies must move beyond static policies to dynamic trust models that evaluate agent behavior based on intent, not just predefined rules.

Autonomous systems evolve constantly, and so do adversaries who exploit them. Organizations are no longer defending fixed environments, but adaptive ecosystems shaped by AI, making cybersecurity leadership more challenging than ever.

The threat landscape has also transformed.

Attackers now leverage AI to impersonate identities, create deepfakes, and execute attacks at machine speed. This evolution demands a new approach to cybersecurity resilience, one that prioritizes not only defense but also detection of deception at scale.

CISOs today serve as the final layer of intelligent judgment in environments where machines act faster than humans can respond.

True impact in cybersecurity is often invisible. The most meaningful successes are the incidents that never occur, the breaches prevented, and the risks mitigated before escalation. For example, implementing intent-based verification checkpoints within AI governance frameworks can detect behavioral anomalies early, preventing potential threats before they materialize.

Equally important is collaboration. While threat actors share knowledge freely, defenders often operate in silos. Open exchange of real-world experiences, including failures and lessons learned, is essential to strengthening collective defense.

88

Subas Chandra Khanal CISO Sanima Bank Limited

Subas Chandra Khanal believes that in a digital first world, security isn’t just a department, it's a foundation for trust. As the Chief Information Security Officer (CISO) at Sanima Bank Limited, Subas brings over 20 years of experience to the table, specializing in the art of turning complex regulatory "must-haves" into smart, scalable technical realities.

While his roots are technical, Subas’s leadership style is deeply human. He believes a resilient bank is built on more than just firewalls; it is built on a culture of awareness, robust governance, and a proactive approach to risk. From mastering the intricacies of NIST, ISO 27001, and PCI DSS to managing threat intelligence, he ensures that security is a foundational trustbuilder rather than a hurdle. He is dedicated to implementing AI with a "safety-first" mindset, ensuring innovation is balanced with rigorous ethical and security safeguards.

A dual-certified CISSP and CCSP, Subas leverages deep expertise to build resilient, compliant, and forwardthinking financial institutions.

He doesn't just manage risk, he builds the confidence that allows businesses to grow.

Cybersecurity in the Agentic Era: Navigating AI-Driven Threats and Trust Challenges True resilience today means designing for autonomous threats, enforcing proof-based trust, shrinking breach impact to minutes, and restoring systems through controlled, accountable automation.

Security leaders have spent years evolving defenses for cloud, identity, and continuous delivery. Today, a deeper disruption is underway with the rise of autonomous, adaptive AI agents. In this Agentic Era, cyber threats are no longer limited by human speed or attention. Attacks can be planned, executed, and refined at machine pace, while deception becomes indistinguishable from reality.

High-risk actions should require out-of-band verification. Organizations must minimize blast radius through segmentation and enforce least privilege access. Recovery readiness should be validated through realistic simulations, including deepfake attack scenarios. Finally, adopting AIdriven defense systems with clear governance, auditability, and human oversight is essential.

The attacker’s edge has evolved beyond automation to intelligent adaptation. Traditional attack lifecycles such as reconnaissance, access, lateral movement, and exfiltration are now compressed into nearinstant cycles. Autonomous agents continuously probe systems across identities, endpoints, SaaS platforms, and cloud environments. They learn from defenses, evade detection, and dynamically adjust tactics in real time. As a result, time-to-impact is shrinking faster than most organizations can respond.

Simultaneously, deepfakes and synthetic identities are eroding trust. AI-generated voice, video, and email impersonations can convincingly replicate executives, employees, or partners. Requests for approvals, payments, or sensitive access can no longer rely on human judgment alone. Trust must shift from recognition to continuous verification, enforced through contextual, policy-driven controls.

In this environment, resilience becomes the defining security outcome. Prevention remains important, but organizations must assume compromise attempts are constant. Resilient architectures prioritize least privilege access, strong identity controls, segmentation, immutable logging, and rapid containment strategies. Operational resilience also requires rehearsed response plans and tested recovery capabilities designed for high-pressure, deceptive scenarios.

To stay ahead, CISOs must act decisively.

Strengthening identity as the central control layer with phishing-resistant authentication is critical.

92

Meetali Sharma Director (Risk, Compliance & Information Security) SDG Corporation

Meetali Sharma is a seasoned Risk, Compliance, Data Privacy, Cybersecurity, and Information Security leader with over two decades of experience driving robust security programs aligned with business and regulatory priorities. As Director – Risk, Compliance & Information Security at SDG, she leads enterprise risk assessments, strengthens internal controls, and enhances security and compliance maturity.

Her expertise spans information security risk management, incident management, audit leadership, and enterprise-wide awareness initiatives. She has delivered ISO/IEC 27001-aligned programs, ISO 31000 risk frameworks, and contractual compliance solutions.

Meetali holds a Doctorate in Management Studies and certifications including CRISC, ISO 27001 Lead Auditor, and ISO 31000. She is also a recognized speaker and contributor on cybersecurity and risk.

Cyber Trust in the Agentic Era: From Control to Intelligence

We spent two decades securing what humans could access. The next decade will be defined by governing what agents are allowed to decide.

The cybersecurity landscape is evolving rapidly, shifting from human-led threats to autonomous, intelligent adversaries that adapt in real time. In this Agentic Era-where AI systems operate, learn, and improve independently-traditional security measures, reliant on static controls and reactive defenses, fall short. Organizations must now design trust into their systems, validate it continuously, and adapt it dynamically.

CISOs who excel will articulate complex risks in business terms, empowering executives to make informed strategic choices.

In the Agentic Era, the CISO serves as more than a protector-they are stewards of trust, ensuring innovation is secure, intelligence is ethical, and resilience scales effectively.

As businesses embrace AI-driven technologies, cloud-native infrastructures, and interconnected ecosystems, the CISO's role is transforming.

Security has moved beyond a support function to become a strategic pillar supporting digital trust, sustainable growth, and customer confidence. The core challenge lies in safeguarding not only infrastructure but the AI decision engines at its heart- algorithms, models, and autonomous processes that function at machine speed.

Resilience demands a proactive stance, anticipating threats rather than merely recovering from them.

Leading organizations integrate security deeply into data pipelines, AI lifecycles, and DevSecOps workflows. Continuous monitoring, behavioral analytics, and real-time threat intelligence are vital for detecting anomalies in both infrastructure and AI behaviors. Frameworks like ISO/IEC 42001 and emerging AI regulations lay the groundwork, but operationalizing them within engineering and product teams drives true effectiveness.

"Trust by design" remains essential. Embedding privacy, security, and ethical AI principles from the start ensures transparency, explainability, and accountability in automated decisions. As deepfakes, synthetic identities, and AI-enhanced attacks erode distinctions between real and fabricated, CISOs must advocate for identity-centric security and zero-trust architectures that verify every interaction.

Cybersecurity's future hinges on integrating security, privacy, AI governance, and risk management into a cohesive, intelligence-led discipline.

94

Vikas Chaubey CISO & DPO NovelVox

Vikas Chaubey is an accomplished CISO, DPO, and AI and cloud security leader with over 15 years of experience across SaaS and BFSI sectors. He specializes in building scalable cybersecurity programs, aligning risk with business goals, and driving regulatory compliance including SOC 2, ISO 27001, PCI DSS, GDPR, and DPDPA 2023.

Vikas is a strong advocate of secure digital transformation, implementing AI governance frameworks such as NIST AI RMF and ISO 42001. He has led enterprise security transformations, zero-trust architectures, and cloud security initiatives across AWS and Azure.

Known for security-by-design and privacy-first strategies, he enables organizations to achieve resilience, compliance, and secure innovation at scale.

Securing the Agentic Future: Building Trust, Resilience & Intelligence in the Age of Autonomous AI In this new era of autonomous intelligence, we must not merely react to threats, but build systems where trust is continuously earned, resilience is deeply embedded, and intelligence always stays one step ahead.

As artificial intelligence evolves from a supporting tool to an autonomous decision-maker, organizations are entering the agentic era. In this paradigm, AIdriven systems are no longer limited to assisting humans but are actively executing tasks, managing infrastructure, and making decisions at machine speed. This transformation is redefining cybersecurity and challenging long-standing assumptions around control, accountability, and oversight.

At the same time, cybersecurity intelligence must become predictive and context-aware. Leveraging advanced analytics and AI-driven insights allows organizations to anticipate threats and respond proactively to evolving attack patterns. Embedding a culture of risk awareness, accountability, and regulatory alignment ensures that innovation remains secure and sustainable.

Traditional security frameworks were built around human identities and predictable behavior. Agentic systems, however, operate with speed and autonomy, often chaining actions across multiple platforms without direct human involvement. This introduces complex and less visible threat vectors that conventional monitoring struggles to capture.

Trust, therefore, can no longer remain static or perimeter-focused. It must evolve into a continuous verification model where every action is authenticated, observed, and validated in real time.

Resilience must also be redefined. The focus is shifting from reacting to incidents toward anticipating and preventing them. Organizations need the ability to detect subtle behavioral anomalies before they escalate into critical risks. This requires intelligent monitoring, adaptive controls, and governance frameworks that enable swift and informed responses. Strengthening collaboration across technology, risk, and business teams further enhances organizational preparedness.

At the same time, cybersecurity intelligence must become predictive and context-aware. Leveraging advanced analytics and AI-driven insights allows organizations to anticipate threats and respond proactively to evolving attack patterns. Embedding a culture of risk awareness, accountability, and regulatory alignment ensures that innovation remains secure and sustainable.

96

Sunny Mathur CISO Société Générale Securities India

Sunny Mathur is a seasoned cybersecurity leader with over 21 years of experience in information security, governance, risk, and compliance. As Chief Information Security Officer (CISO) at Société Générale Securities India, he leads the organization’s Information Security Management System (ISMS) and drives strategic initiatives to strengthen cybersecurity governance and regulatory compliance.

He specializes in incident response, audit readiness, and implementing regulatory and global frameworks.

Sunny has played a pivotal role in enhancing cybersecurity maturity and fostering a risk-aware culture.

His focus remains on building resilient, compliant security environments that enable secure, scalable, and confident business operations.

Cyber Threats in the Agentic Era: Driving Trust, Resilience, & Intelligent Security Leadership In the agentic era, cybersecurity is not just about protection, it is about continuously building trust, enabling resilience, and driving intelligence at the speed of innovation.

As organizations advance their digital transformation journeys, the rise of Agentic AI is reshaping the cybersecurity landscape.

Autonomous systems are no longer limited to assisting human actions; they are independently analyzing, deciding, and executing tasks across complex enterprise environments. While this evolution drives efficiency and innovation, it also introduces sophisticated cyber threats that demand a fundamental shift in security strategy.

In this new era, trust can no longer depend on static credentials or perimeter-based defenses.

With machine identities outnumbering human users, trust must be continuously validated through dynamic, risk-based frameworks. Zero Trust principles, combined with strong governance and regulatory alignment, ensure that every interaction is authenticated, monitored, and accountable in real time.

It is no longer confined to managing risk but extends to enabling secure innovation, ensuring regulatory compliance, and building trust across digital ecosystems. Security is now a strategic function that supports business growth while safeguarding critical assets.

As cyber threats grow more complex, success will depend on the ability to integrate trust, resilience, and intelligence into every layer of the enterprise.

Organizations that embrace this approach will be better positioned to innovate confidently while maintaining a strong and adaptive security posture.

The threat landscape is evolving at an unprecedented pace. AI-powered cyberattacks, identity fraud, automated reconnaissance, and large-scale data breaches are increasingly operating at machine speed. To counter these risks, resilience must move beyond traditional recovery models to proactive adaptability.

Organizations must embed security into their core architecture, enabling systems to anticipate, respond, and recover seamlessly from disruptions.

Intelligence is becoming the backbone of modern cybersecurity. Advanced analytics, AI-driven threat detection, and real-time intelligence sharing empower organizations to identify patterns, predict threats, and act decisively. The focus is shifting from reactive defense to predictive and autonomous security operations.

In this context, the role of cybersecurity leadership is expanding.

98

Vinod Kumar Gupta CISO & DPO Paytm Money

Vinod Kumar Gupta is a results-driven CISO and Data Protection Officer with over 22 years of impeccable leadership experience across BFSI, fintech, automotive, and global MNC environments. Currently serving at Paytm Money, he oversees cybersecurity, data protection, GRC, regulatory compliance, and enterprise risk management.

He brings deep expertise in RBI and SEBIregulated frameworks, including PCI-DSS and ISO 27001, and has successfully led NextGen SOC transformations and multi-million-dollar security programs across 40+ countries. Recognized as CISO of the Year 2025 and Top DPO of the Year 2025, Vinod is known for aligning cybersecurity with business goals, ensuring resilient, compliant, and cost-effective digital ecosystems that enable secure growth and innovation.

When the adversary moves at machine speed, the only viable defence is one that can match it. The era of humans chasing AI-generated threats through alert queues is ending.

The era of AI hunting AI has begun.

The asymmetry has been building for years, but 2024 made it undeniable. Threat actors with access to large language models and agentic toolchains can now generate novel malware variants faster than signature databases can update, craft phishing campaigns personalised to individual targets at industrial scale, and probe enterprise attack surfaces continuouslywithout fatigue, without sleep, and at a cost that has dropped to near zero. The traditional security operations model, built around human analysts reviewing alerts and writing detection rules,

was not designed to operate at this tempo. The security community's response is increasingly clear: meet automation with automation. AI-enabled defence agents are moving from experimental pilots to production deployments in security operations centres around the world. The question is no longer whether to use AI in defence-it is how to deploy it with sufficient rigour, oversight, and operational integration to make the difference that the threat landscape demands.

The Anatomy of an AI Hunting Agent Defensive AI agents in the security context are not chatbots layered over a SIEM dashboard. The most capable deployments are purpose-built autonomous systems that combine real-time telemetry ingestion, behavioural reasoning, threat intelligence enrichment, and-in the most advanced cases-the ability to take containment actions without waiting for human approval.

102

A typical threat-hunting agent operates across several layers simultaneously. At the data layer, it continuously ingests signals from endpoint detection tools, network traffic analysis, cloud access logs, identity systems, and email security platforms-correlating events across sources that would take a human analyst hours to manually review. At the reasoning layer, it applies contextual analysis to distinguish genuine anomalies from noise, drawing on both statistical baselines and curated threat intelligence to assess whether a pattern of behaviour represents a credible threat. At the action layer, the most mature agents can isolate a compromised endpoint, revoke a suspicious OAuth token, or block a lateral movement attempt in secondsbefore the attacker has time to complete their objective.

The dwell time advantage that attackers have relied on for decades-the average 200-plus days between initial compromise and detection-is the precise problem that autonomous hunting agents are engineered to collapse.

Where AI Agents Outperform Human Analysts The performance advantages of AI threat-hunting agents are most pronounced in three domains. The first is scale. An agent can monitor every endpoint, every identity, and every network flow in an enterprise simultaneously, without the triage bottlenecks that force human teams to prioritise coverage. The second is speed. Detection-to-response cycles that once measured in hours or days can compress to seconds when the detection and initial response are both automated. The third is consistency. Human analysts experience alert fatigue, make variable judgement calls under pressure, and are unavailable outside working hours. An AI hunting agent applies the same analytical rigour to the ten-thousandth alert as to the first, at three in the morning on a public holiday.

These are not marginal improvements. They represent a structural shift in what a security operations capability can achieve with a given headcount-and they are directly relevant to the talent shortage that every CISO is navigating. Organisations that deploy effective AI hunting agents are not replacing their analysts; they are redirecting them toward the highcomplexity, high-judgement work that autonomous systems cannot yet handle: threat actor attribution, strategic intelligence analysis, and the investigation of novel attack patterns that fall outside existing detection models.

The Governance Imperative The deployment of autonomous defensive agents introduces its own governance challenges that security leaders are only beginning to resolve.

An agent with the authority to isolate endpoints or revoke credentials can cause significant operational disruption if it acts on a false positive. The blast radius of an autonomous defensive action must be carefully bounded-and the conditions under which an agent escalates to human review rather than acting independently must be explicitly defined and regularly tested.

There is also a model integrity question that deserves more attention than it currently receives. Adversaries who understand that a defender is using an AI hunting agent have both the motive and, increasingly, the capability to attempt adversarial manipulation of that agent -crafting attack signatures designed to evade detection, generating noise to exhaust the agent's analytical capacity, or probing for the boundaries of its decision logic. Defending the defensive AI is itself a security problem, and one that requires dedicated attention.

The New Operational Doctrine The security teams that are extracting the most value from AI hunting agents share a common operational philosophy: humans set the strategy, define the boundaries, and handle the exceptions; agents handle the volume, the speed, and the consistency. This is not a temporary arrangement pending further AI capability development. It is the sustainable model for security operations in an era where the attack surface is too large, the threats too fast, and the talent too scarce for any purely human operation to keep pace.

Fighting fire with fire is not a metaphor for recklessness. It is a recognition that the nature of the threat has changed, and that the nature of the defence must change with it. The organisations that accept this reality and build the governance frameworks to operationalise it safely will not merely survive the agentic threat era-they will define what effective security looks like within it.

Secure with Confidence.

Comply with Clarity.

In an era where cyber threats evolve faster than regulations can keep pace, organizations need more than protection.

Cyber Veritas bridges the gap between cybersecurity excellence and regulatory compliance, ensuring your business stays secure, compliant, and competitive.

We deliver risk-led cybersecurity strategies and compliance advisory aligned with GDPR, NIST, ISO 27001, IASME Cyber Essentials, and PCI DSS. Cyber Risk Assessments and Compliance Advisory Penetration Testing and Vulnerability Management Incident Response and Ransomware Readiness Application Security (SCA, SAST, DAST) Governance, Risk and Compliance (GRC) Secure Digital Transformation

Why CyberVeritas Risk-Centric. Regulation-Ready. Business-Aligned.

With over 20 years of experience and a strong Big Four pedigree, CyberVeritas brings enterprise-grade expertise with proven real-world delivery. Our methodology identifies genuine risks, tests actual weaknesses, and enables leadership teams to make confident security decisions under pressure.

Security should never be theoretical. It must perform when it matters most.

www.cyberveritas.com

info@cyberveritas.co.uk

+91 99102 66770