Jeremy Epling, CPO at Vanta, discusses how 79% of organizations deploy AI agents but only 45% have adequate compliance tooling. AI agents create new attack vectors for adversaries while also automating security work. Epling warns that AI should not answer questions humans cannot understand.
While like 79% of them are using agentic AI, I think only 45% of them said they have the compliance tools to actually go support it. And over half felt like the AI innovation is completely outpacing their ability to keep up with all the new security threats that are coming.
Whenever I run training on AI agents, the first question the audience asks is, is this going to cause me security problems? The answer is yes. AI agents are going to cause a lot of security problems in the near future, but they're also great tools for helping with cybersecurity.
It definitely feels like there's a brand new wave of attacks that are coming and like they're also helping attackers write code that they never could before in more advanced ways. So there's a lot of old kind of smelly data sitting around everywhere that's very easy to kind of like pull up if you don't know what's good and what's not.
I want to explore this double-edged sword. So today we're chatting to Jeremy Effling, the Chief Product Officer at AI-powered compliance platform Vanta. Jeremy has over 2 decades of experience as a tech executive and previously was VP of Product at GitHub.
Hey, my team contributed to like, you know, whatever, 90% of the revenue we got last last year by answering these questionnaires. If we don't feel like we have a high-quality answer, we'd rather just say like, we don't have an answer to this. It's time like if a human can't understand it or answer it easily, AI is definitely not going to be able to.
So let's find out if agents are going to help or harm security.