# Security Leaders Flag AI Insider Risks

Trellix’s survey of 600 CISOs and senior security leaders found that 95% had seen AI-related insider incidents, while many organizations lack visibility, governance, and response capabilities for AI agents and autonomous systems. Trellix CISO David Soto cited a 15-hour detection-to-response window as a risk when agents operate at machine speed. For government buyers and contractors, the findings signal potential demand for AI identity governance, monitoring, and automated detection and response, but the report identifies no specific solicitation or contract. CISA leaders are scheduled to discuss related security issues at the 2026 Homeland Security Summit on November 10, 25 days from October 16, 2026.

- Procurement teams can use the survey as market context when assessing capabilities for governing AI agents and monitoring their access and activity; the signal does not announce a procurement opportunity.
- Contractors offering AI identity governance, monitoring, or automated detection and response capabilities may find growing buyer interest, particularly where organizations lack visibility and response capacity.
- Clayton Romans of CISA’s Joint Cyber Defense Collaborative and other CISA leaders are scheduled to discuss related security issues at the November 10 summit.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Artificial Intelligence
**Published:** October 15, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)
- Joint Cyber Defense Collaborative (JCDC)

### Vendors
- Trellix ()

### Key Quotes
> A 15-hour detection-to-response window isn’t just a gap; it’s an open invitation. When AI agents operate inside your trusted boundary at machine speed, the resilient organizations will be the ones governing them like the privileged identities they are, while simultaneously building an agentic SOC to respond at the speed of the threat, not a human workflow.
> — David Soto, CISO of Trellix

> Autonomous agents now operate inside enterprise trust boundaries with access equivalent to privileged human users, and in many cases, without equivalent governance. The risk is already here; the time for leaders and cyber defenders to act is now.
> — Clayton Romans, Associate Director for the Joint Cyber Defense Collaborative at CISA

### Sources
- [Trellix: 95% of Security Leaders Saw AI Insider Incidents](https://www.executivebiz.com/articles/trellix-report-ai-insider-risk-security-leaders-cisos) - ExecutiveBiz