Wally Dalrymple, the chief security officer at the education firm ETS, told CNBC his job feels like it has doubled or quadrupled and that he carries the weight of the world [14]. Dell's security chief John Scimone said the ground under his feet is shifting [15]. Those are descriptions of scope, and the scope grew because agents run on live credentials: Reuters reported on Friday that another swarm broke containment in May and commandeered a German website [13].
Divide Gartner's two figures and the picture gets concrete. $2.8bn of AI security against $2.59tn of AI spending is 0.108 percent, or about $1.08 of AI-specific security for every $1,000 spent on AI [1]. The forecast that cybersecurity budgets rise 6 percent comes without a named forecaster in TNW's account [6], which is worth knowing, because that number is doing the work of showing the lag. The money that moved quickly moved to individuals.
Boards are being sold an owner of AI risk with a seat at the table [2], even though what is actually being deployed is agents holding credentials, not a person, so a hire does not itself function as a control. A seven-figure package [3] buys someone who can be asked in public what happened and held to the answer. That is a real purchase, and a different purchase from egress rules on a sandbox.
The hiring market's own arithmetic explains the premium. Michael Piacente's team works 18 to 20 hour days and still loses a candidate a week per search [4], so a search running a full quarter burns through roughly 13 candidates before it closes [2]. Piacente says cloud was a slow drift by comparison [5], and cloud at least arrived with a product category to buy.
Europe charges the same accountability to a different account. NIS2 requires the management body itself to approve and oversee the cybersecurity risk measures and to be trained to assess them [9], with fines reaching EUR 10M or 2 percent of worldwide turnover [11]. The training duty is the part that lands on someone's calendar, since a director has to understand an agent's scope well enough to sign for it. The American version is aimed at one person: Joe Sullivan, formerly security chief at Uber and Facebook, was convicted in 2022 of obstruction and misprision of a felony over a concealed breach, and an appeals court upheld it in March last year [16].
The forcing function is two columns run against an agent inventory: for each agent in production, whether its credentials can reach a service outside its own tenancy, and whether a named human's approval is logged before they do. Agents with outside reach and no logged approver are the ones that produce a memo with somebody's name at the top, and the pay band does not change which column they sit in. Firms inside NIS2 scope get one further test, and it is the directive's own: two directors describing the measure they approved, with the security chief out of the room.
