70% of Organizations Now Delegate Human Decisions to AI, but Half Cannot Fully Audit What It Does
New global research finds organizations are prepared to let AI investigate threats, deploy code, and change access
Press Release Disclaimer: This is a press release distributed through the XPR Media network. It has not been independently verified by our newsroom.
SUNNYVALE, Calif., Oct. 21, 2026 (GLOBE NEWSWIRE) — AI is emerging as a new kind of insider risk, using legitimate access to make decisions, reach sensitive data, and take actions that organizations cannot always see or control, according to new global research from Illumio Inc., the breach containment company.
Published today in Licensed to Act: How AI Autonomy Is Outrunning the Limits Placed on It, the research finds that 70% of organizations now delegate decisions and actions that required human approval a year ago, yet only 49% can see and audit every action taken by an AI agent. The findings expose an emerging control gap between the authority organizations give AI and their ability to audit and constrain its actions.
This is no longer a theoretical risk. More than three-quarters of organizations (76%) experienced at least one AI-related security issue or warning sign in the past 12 months. While much of the AI security debate has focused on how attackers might use the technology, the findings also reveal risks emerging from organizations’ own AI systems as they gain access to enterprise applications, data, and infrastructure.
More than a third of organizations (35%) say AI made a recommendation that would have created a security risk if followed, and 26% have had an AI agent or tool connect to systems without security approval. Twenty-four percent say AI accessed data it should not have reached, while the same proportion report that AI produced or triggered an unauthorized action. Unlike an external attacker that must first break into an environment, an organization’s own AI may already have the credentials and connectivity needed to reach critical systems and data.
The stakes are particularly high as AI gains authority within the security function itself. Sixty-seven percent of organizations use AI within cybersecurity operations, while 32% are comfortable letting AI run security investigations without human review. Twenty-nine percent are comfortable allowing AI to deploy code changes unsupervised, and 26% say the same about granting or revoking access permissions.
Other key findings include:
- Organizations are accepting more risk to unlock AI value: More than half of organizations (56%) say they are willing to accept more cyber risk than they were 12 months ago. Among that group, over half permit autonomous AI actions in non-production environments, and 47% permit them in production environments.
- Enforceable limits remain lower security priorities: Eighty-two percent say AI agents require fundamentally different security controls than traditional software, and 69% agree that limiting what AI can access matters more than predicting every threat. But the controls that define and enforce those limits remain lower priorities: only 25% name explicitly defined permitted actions as one of their two main controls, and just 27% say frontier AI has made network segmentation or microsegmentation more important.
“The biggest AI risk may not be a system that breaks its rules. It may be one that was never given meaningful limits in the first place,” said Raghu Nandakumara, VP of Industry Strategy at Illumio. “AI agents are highly persistent in pursuing a goal, so trying to anticipate every action is a losing battle. Businesses must set strict limits on what they can access and do, then enforce those limits within the application and across the underlying infrastructure. That is how you contain unexpected behavior before it causes real damage.”
As AI moves from an adviser that recommends actions to an operator given growing authority to take them, the research points to one practical response: limit what AI can reach through Zero Trust, rather than trying to predict everything it might do.
To explore the report, visit: https://www.illumio.com/interactive-tools/ai-autonomy-report
Research Methodology
Sapio Research conducted this study on behalf of Illumio, surveying 1,100 IT and security decision-makers across 10 markets: the U.S. (n=200) and the UK, France, Germany/Switzerland/Austria (DACH), the Middle East (UAE and Saudi Arabia), Japan, Australia, Singapore, Brazil, and Mexico (n=100 each). Figures cited are unweighted global averages.
About Illumio
Illumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience. Powered by an AI security graph, our breach containment platform identifies and contains threats across hybrid multi-cloud environments – stopping the spread of attacks before they become disasters.
Recognized as a Leader and Customer Favorite in The Forrester Wave™ for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.
Media Contact: comms-team@illumio.com
Media gallery
