Tighten Contracts and Recovery Tests for AI-Accelerated Cyber Risk

What happened

Vicarius published a remediation report showing a large closure gap where many organisations treat ticket creation or administrative sign-off as remediation rather than implementing fixes. The study highlights that most critical vulnerability responses result in administrative actions, with only a minority using automated remediation. Watch whether procurement and contracting teams start requiring automation or accountable SLAs from suppliers

Why the category manager should care

Treat remediation workflow evidence as a procurement deliverable: require automated remediation or explicit contractual ownership and proof-of-fix

Key facts

• Study finds many organisations close vulnerabilities with administrative actions instead of f
• Only a minority of respondents report automated remediation directly from security platforms
• Survey includes security professionals responsible for remediation workflows

What happened

Index Engines reports that AI is making ransomware attacks faster and more precise, increasing the chance of data corruption that standard restores may not detect. The vendor argues this forces organisations to prioritise recovery validation and data integrity checks alongside prevention. Procurement should verify backup restore integrity and forensic evidence when contracting recovery and security providers

Why the category manager should care

Prioritise vendors that can prove the integrity of restored data and supply forensic artifacts for investigations

Key facts

• AI is reported to shorten attacker dwell times and automate parts of attack chains
• Vendor argument: shift from prevention-first to resilience-and-recovery focus for cyber strategy

What happened

Entrovy has moved Kinetic8, a cyber asset intelligence platform, from early access to general availability and positions it as a single-pane solution for fragmented estates. The product claims explainable risk scoring, rapid OpenAPI adapters and attacker-route mapping, making it operationally useful for prioritising remediation. Watch adoption among regulated buyers where auditability and evidence mapping are procurement gates

Why the category manager should care

Treat explainable asset mapping as a scored criterion in RFPs for security operations and asset-management tools

Key facts

• Kinetic8 advanced from early access to general availability
• Used in early access by enterprises in financial services, technology and manufacturing
• Vendor claims rapid adapter generation from OpenAPI specifications

What happened

Practitioner examples show agentic AI can autonomously perform broad changes that appear correct but cause outages when not governed, such as unintended configuration rotations that break logins. Regulators (ASIC, APRA) have flagged agentic AI as a systemic or supervisory concern, increasing the need for single-source governance and oversight. Procurement should demand agent governance, clear audit trails and rollback controls from vendors using autonomous features

Why the category manager should care

Require agents to operate inside existing controlled workflows with a single source of truth to avoid sprawl and hidden autonomy

Key facts

• Real-world example: an agent opened numerous pull requests and accidentally rotated a legacy
• Regulatory attention: ASIC and APRA named agentic AI as a risk or supervisory priority

What happened

Regional practitioners report a shift toward resilience over prevention as AI increases the speed and sophistication of attacks, prompting budget and posture changes. Organisations are reallocating spend to response and recovery capabilities and emphasising identity resilience as part of incident planning. Procurement should reweight supplier evaluations to prioritise recovery performance and validated forensic capability

Why the category manager should care

Rebalance sourcing criteria and budget planning toward suppliers that demonstrate tested recovery and continuity capabilities

Key facts

• Industry commentary notes a measurable reallocation of spend toward resilience and recovery
• Increased emphasis on identity resilience and validated recovery plans in ANZ organisations