Cequence Security and KPMG Collaborate on Joint Report Examining how Organisations can Govern and Secure Agentic AI

Résumé détaillé

Cequence Security, the leader in application, API, and agentic AI protection, today published Agentic AI Runtime Security, Governance, and Control, a report on governing AI agents as they act. This report has been developed with input from KPMG in Singapore, examining how organisations can govern and secure Agentic AI as agents move from generating content to autonomously taking consequential actions.

New Cequence data in the report shows AI agents already signing in, booking and buying on behalf of customers, often without identifying themselves

SINGAPORE, Nov. 11, 2026 /PRNewswire/ -- Cequence Security, the leader in application, API, and agentic AI protection, today published Agentic AI Runtime Security, Governance, and Control, a report on governing AI agents as they act. This report has been developed with input from KPMG in Singapore, examining how organisations can govern and secure Agentic AI as agents move from generating content to autonomously taking consequential actions. The findings of the report will be presented to senior business, technology, and policy leaders at a joint event hosted at KPMG's office in Singapore on 19 November. Read the executive brief or download the full report.

AI is shifting from answering questions to taking action, with agents now issuing refunds, updating records, and moving money. The report sets out how to govern those actions as they happen, for agents deployed by organizations.

In a controlled study using a Cequence research prototype, agents with only logins and fixed permissions tried to act outside their job in 44% of runs. When each agent was given a defined job and every action was checked against it, those attempts fell to 1%; task completion rose from 76% to 95%, and agents used about 35% fewer tokens per run.

"Organisations across Asia-Pacific are moving from experimenting with AI to deploying them to achieve real business outcomes. Traditional controls such as identity verification and fixed access permissions are important, but they may not be sufficient when an agent can carry out a sequence of actions on behalf of a business or customer. Organisations need governance that considers the agent's role, the context of each action, and the cumulative risk created across an entire task.

"An approval at step one shouldn't carry into step five," said Shreyans Mehta, CTO and co-founder of Cequence Security, who…

Cequenc…

Début de l'article, extrait de Yahoo Finance. Pour lire la suite, ouvrez l'article chez le média.