NCSC UK interim guidance on managing the cyber risk of agentic AI (August 2026)
policy · policy:ncsc-uk-agentic-ai-risk-guidance-2026
Interim practical guidance published by NCSC UK on 2026-08-20 for organisations deploying agentic AI: proportionality to autonomy and blast radius, pre-deployment threat modelling, human-in/on/out-of-the-loop oversight tiers with named accountability, a four-level network-sandboxing maturity model, credential scoping to task and shortest practicable lifetime, agentic activity treated as user activity in 24/7 monitoring with immutable logs, and a maintained emergency shutdown. Explicitly interim, to be superseded by formal guidance in development (NCSC UK, 2026-08-20).
Aliases: Managing the cyber risk of agentic AI
Story timeline
No published entries reference this entity yet.
Entries about NCSC UK interim guidance on managing the cyber risk of agentic AI (August 2026)
No published entry is about this entity yet · an entry attaches by registry key, by the entity's name or a public alias in its title or body, or (for CVE entities) by exact CVE id.