'AI resilience' covers four different purchases depending on which team is buying

The disagreement follows the org chart. Most of the experts ITPro consulted framed the term from inside their own discipline ^[2], and the four readings belong to four different teams ^[4]. In my view, the word enters procurement through whichever team took the vendor meeting first. It arrives with that team's definition attached.

The board-deck version is one line saying the company is investing in AI resilience. That line is incomplete because the broadest definition on offer fits every team's purchase. The World Economic Forum's resilience consortium defines resilience as "the capacity to deal with adversity, withstand disruption, and continuously adapt as crises arise over time" ^[7]. ITPro's assessment is that this falls short of establishing what businesses are withstanding and adapting to ^[8]. A board could approve a backup contract under that sentence and believe it had bought control over its agents.

Agents are why the choice of meaning matters. Denis Shilov, chief executive of White Circle, said agents have "excessive agency" ^[9]. "They can drift from the user's prompt, navigate through internal information, and access or disclose things they shouldn't. They can run destructive actions, produce sloppy code, and much more," he said ^[10]. ITPro argues that an agent can finish a task and deliver a result by a route nobody would have approved ^[11].

A skeptic would say this is ordinary marketing drift, and that buyers already read past labels to feature lists. The broader word is in heavy use: "resilience" is twice as likely to come up on earnings calls as it was before the pandemic ^[12]. Reading past the label works when one team buys for one system. Agents cross the lines between teams. "AI is causing an organizational shift that's rapidly dissolving traditional business and data boundaries," said Maureen Holland, a product marketing director at Mimecast ^[13]. "The old way we built resilience into a business no longer maps cleanly onto how risk actually moves through it now," she said ^[14].

Security specialists begin from the assumption that prevention fails. "Security has long focused on being robust: how can we avoid all breaches?" said Chris Hosking, an AI and cloud security expert at SentinelOne ^[15]. "Resilience is an acknowledgement that while we need strong walls, we also need to be prepared that a breach is going to happen," he said ^[16].

The 4,500% rise measures attention. It puts UK searches at 46 times their level a year earlier ^[1]. Figures cited by ITPro have 65% of businesses already using autonomous agents across their operations ^[17], so the buying is under way before the term has a settled meaning. The feature does not report spending on tools sold under the label, or document a company that bought the wrong one. The cost of a mismatch cannot yet be measured from this record.

The decision this quarter is which of the four failures the organisation is paying to survive. Next quarter, the likely test of that purchase is an incident or a regulator applying whichever definition the organisation did not choose.