AI agents are widely regarded as the next major evolution in artificial intelligence. From managing workflows and responding to customers to supporting HR, compliance, and operational functions, they are set to transform how organisations work. But as with all powerful new technologies, understanding the opportunities and the risks is vital so that good governance structures can be put in place.

Last month, the Australian Prime Minister disclosed that an AI agent hacked a government portal. This seems to be one of the world’s first examples of an AI-led attack on a government website. And, over the summer, there were a number of other media reports of AI agents "going rogue", hacking into websites and even falsely reporting crimes.

In this episode, Ibrahim is joined by James Moss who is Director of Cyber Investigations at the law firm Addleshaw Goddard LLP, based in Manchester. Before returning to private practice, James held a senior leadership role at the Information Commission.

James and Ibrahim explore what AI agents actually are, how they differ from conventional generative AI, the risks they present and what organisations should be doing now to prepare for their deployment. They also discuss how existing laws impact this technology, and what IG professionals should be doing to ensure they are part of the conversation when their organisation is considering deploying AI agents.

Useful Links

Addleshaw Goddard

AI Agents Risk Blog

NCSC Guide to Managing the Cyber Risk of Agentic AI

IBM Guide to AI Agents

Phaselaw

Send us Fan Mail

This podcast is sponsored by Phaselaw - a purpose-built solution for document disclosures, like subject access requests and FOI requests. Instead of redacting PDFs one by one, or forcing litigation software to do a job it wasn't designed for, with Phaselaw you get collection, review, and redaction in one workflow. Teams across the World are using it to cut response times from weeks to days.

For Guardians of Data listeners, Phaselaw is offering a two-month free trial; run it on live requests, see what it does to your backlog, decide from there. No card, no commitment.