Agentic AI Is Doing What a Thousand Breach Reports Couldn't: Getting Boards to Open the Checkbook

For roughly twenty years, CISOs have rehearsed the same budget pitch. A breach happens, urgency spikes, a few dollars shake loose, and then the moment passes. AI may actually break the cycle.

The arrival of frontier models capable of autonomous offensive operations — and the simultaneous explosion of agentic AI inside enterprises — has manufactured something rare: board-level urgency that does not require a headline-making incident to sustain itself. Consulting firm Bain & Co. has warned that organizations may need to double or triple security investment just to keep pace with the operational complexity these systems introduce.

That math is landing differently than past threat briefings. "Because of [recent AI developments], there's been this realization that we haven't enabled AI as much as we need to in security," said Nate Rollings, CISO at Zafran Security. "We're seeing buy-in from the top down."

The identity implications here are not abstract. Agentic systems need credentials, session tokens, and API keys. They initiate actions — often chaining calls across dozens of internal interfaces in sub-second intervals — with minimal human oversight. That is an OAuth scope nightmare. Conventional privilege models assume a human being sits somewhere in the loop, acting at human speed. Agents do not.

"I've got a single potential agent that can go interact with all 50 interfaces available in the company in a sub-second," said Bernard Brantley, CISO at Corelight. Scale that by three agents per employee and the addressable identity surface triples overnight. Existing PAM tooling, refresh-token rotation policies, and SCIM provisioning workflows were not designed for this.

Diana Kelley, CISO at Noma Security, framed it plainly: "We're now protecting a decision and automation layer." That means agentic identities need the same lifecycle management — logging, behavioral baselining, anomaly detection, deprovisioning — that mature organizations apply to privileged human accounts. Whether MFA helps depends entirely on whether the agent's credential store is itself protected; in most deployments right now, it is not.

AI-assisted coding compounds the problem. Developers shipping AI-generated code at accelerated velocity are introducing authentication flaws and insecure dependency chains that security review cycles cannot absorb. More surface, less oversight.

Not everyone is ready to declare a spending revolution. Ian Thornton-Trump, CISO at Inversion6, offered the necessary counterweight: vague AI fear is not a business case, and boards that have learned to ignore hype-driven budget requests will not suddenly stop. "Waving the flag of AI is the wrong answer," he said. The pitch that survives scrutiny frames security as the governance layer that lets the business scale AI without losing visibility or control — data poisoning, prompt injection, rogue agent actions included.

Brantley put it precisely: "The increase in cyber budget should be oriented toward delivering business value with respect to the current or strategic AI goal." That reframe — security as operational prerequisite rather than insurance policy — is the version of the argument that actually closes.