The intelligence and cybersecurity agencies of the U.S., Australia, Canada, New Zealand and the U.K. have released new guidance on securing agentic artificial intelligence systems used in critical infrastructure and defense environments.
The latest guidance highlights the growing cybersecurity risks tied to agentic AI. As agencies emphasize governance, oversight and continuous risk assessment, these priorities are expected to shape ongoing discussions across the defense and critical infrastructure sectors. Save your seat now for the 2026 Cyber Summit, which will explore the role of AI in cyber defense, post-quantum cryptography, zero trust and other cyber priorities.
Table of Contents
What Are the Security Risks of Agentic AI?
The National Security Agency said Thursday the cybersecurity information sheet titled “Careful Adoption of Agentic AI Services” outlines several risks associated with the use of agentic AI.
- Privilege risks
- Design and configuration risks
- Behavior risks
- Structural risks
- Accountability risks
NSA noted that agentic AI systems also inherit risks associated with large language models and contribute to an evolving cybersecurity landscape.
What Are the Best Practices for Securing Agentic AI Tools?
The document outlines best practices across multiple phases of the AI lifecycle:
- Designing secure agents
- Developing secure agents
- Managing third-party components
- Deploying agents securely
- Operating agents securely
According to the guidance, organizations should deploy agentic AI incrementally and continuously assess systems against evolving threat models. The document also highlighted the need for strong governance, rigorous monitoring, explicit accountability and human oversight.
How Does the Guidance Build on Prior AI Cybersecurity Efforts?
The new guidance follows earlier federal and allied efforts to address AI security risks across critical systems.
In 2025, the Cybersecurity and Infrastructure Security Agency and its allied partners issued guidance for critical infrastructure operators deploying AI in operational technology systems.
In a separate cybersecurity information sheet, NSA and international partners also outlined best practices for securing data across the AI lifecycle.
Related Articles
U.S. Space Command has taken operational control of a facility at Redstone Arsenal in Huntsville, Alabama. Attend the 2026 Air and Space Summit on July 30 and join military leaders and industry executives as they examine topics such as cross-domain operations, secure data integration, commercial space capabilities and the pace of military technology advancement. Reserve your spot now! During a ribbon-cutting ceremony held on Wednesday, Gen. Stephen Whiting, commander of USSPACECOM, said the facility will house the first operational element of the command’s headquarters as part of its ongoing transition from Colorado Springs, Colorado, to Huntsville. “This facility represents a
The Department of Energy and the National Reactor Innovation Center have opened applications for the Nuclear Energy Launch Pad, signaling an effort to accelerate private sector deployment of advanced nuclear technologies through streamlined federal pathways. The request for applications, posted on SAM.gov, builds on 2025 pilot programs to reduce regulatory friction and move technologies more quickly from development to demonstration and eventual commercialization, Idaho National Laboratory said Friday. Government and industry leaders at the Potomac Officers Club’s 2026 FedCiv Summit on Oct. 29 will provide insight into how federal agencies are advancing priority initiatives and shaping procurement strategies. Register now!
President Donald Trump has signed a new executive order aimed at improving efficiency, accountability and performance in federal contracting by utilizing fixed-price and performance-based contracts as the default and preferred method of procurement. What Changes Does the EO Introduce? According to a White House fact sheet issued Thursday, under the EO, agency leaders will also be required to justify the use of non-fixed-price contracts and, in some cases, seek approval before proceeding. Agencies will also have to review their largest existing non-fixed-price contracts and, where feasible, modify or renegotiate them to incorporate fixed-price and performance-based elements. In addition, the Office