Issue Agent proliferation requires real-time behavioural monitoring and dynamic privilege limits

Summary

Deloitte argues that agents are autonomous by design, so their spread across an organisation demands governance well beyond basic activity logs. Businesses will need sophisticated monitoring that analyses agents' decision-making patterns and communication between agents in real time, and automatically flags unusual behaviour. Such monitoring lets security teams catch compromised or misbehaving agents before they cause serious damage. Dynamic privilege management allows teams to run hundreds or even thousands of agents per user while keeping security boundaries, adjusting privileges according to context and behaviour. Life cycle policies covering creation, modification, deactivation and succession help prevent orphaned agents that keep system access after being retired. The report warns that as agents gain the ability to spawn their own agents, they may become prime targets, especially where enterprises cannot see what agents do or which systems they reach.