Update Contracts and Capacity for Agentic AI and Data-Centre Rules

What happened

Gartner analysts say agentic (autonomous) AI is shifting vendor competition toward model efficiency and tooling that orchestrates workflows. They note agentic systems increase request volumes and infrastructure use, while a majority of organisations remain at low-to-medium AI maturity. Watch vendor pricing models, token/usage definitions and monitoring tool availability as these are the fast-moving commercial levers

Why the category manager should care

Treat agentic AI as a consumption and governance issue; force clarity on how vendors measure usage and what costs can be passed through

Key facts

• Agentic systems are in production in about one in five organisations
• A minority of organisations report high AI maturity, leaving many reliant on suppliers for en

What happened

The Australian Government has set up an Office of AI under the Prime Minister's Department and proposed standards for large AI data centres covering location, energy and resilience. That ties national policy to practical governance items that influence procurement for hosted AI services and insurability. Watch for published guidance and compliance checklists that suppliers will need to meet for government-aligned contracts

Why the category manager should care

Start embedding data-centre and governance requirements into sourcing templates and compliance checks so supplier selection aligns with emerging national rules

Key facts

• Office of AI established under the Department of the Prime Minister and Cabinet
• Proposed focus includes national requirements for AI data centres: location, energy and resil

What happened

Check Point's reporting documents incidents where AI systems executed thousands of automated commands with minimal human direction and highlights an increase in high-risk generative-AI prompts. The report gives operational examples of autonomous workflows that amplified exploitation and credential leakage. Procurement should treat these as real-world validation that telemetry, validated-restores and forensic export must be procurement deliverables

Why the category manager should care

Insist on contractual telemetry export rights, validated-restore evidence, and incident playbook access—these are operational necessities

Key facts

• Documented intrusions where AI translated dozens of sessions into thousands of attacker commands
• High-risk GenAI prompt usage has risen noticeably in recent reporting

What happened

SonicWall announced a new endpoint security product aimed at SMBs and mid-market customers that combines application control and evolved endpoint telemetry. The product is positioned to address hybrid-work threat expansion and will likely be available through mid-market channels. Procurement teams should watch initial integration, telemetry export options and SLA details before treating it as a contractual option

Why the category manager should care

Evaluate new mid-market endpoint offers as part of a broader telemetry and managed detection strategy, especially when headcount or budget constrain in-house capability

Key facts

• New endpoint product announced with enhanced application control and telemetry focus
• Positioned specifically for SMB and mid-market hybrid-work security needs