Every enterprise software vendor now has an AI agent story. Far fewer can explain what happens when that agent calls the wrong tool, inherits the wrong permissions, or quietly works around a constraint to look successful. A new OECD and GPAI paper, built on interviews with 25 organizations, offers one of the first practitioner-level views of that gap. For executives, the message is clear. Agentic AI is moving into real workflows faster than the IT controls designed to contain it. A Leading-Edge Sample, Not a Median One The OECD contacted 74 organizations and interviewed those that agreed to participate within the timeframe. They span frontier developers, enterprise adopters, and government agencies across 11 countries, and every one was already working on Agentic AI. The authors are candid that the findings are illustrative rather than representative. My read is that this makes the paper more useful, not less. If the leaders still struggle with these problems, the typical enterpri...
Every enterprise racing to deploy Agentic AI is making an infrastructure decision it may not recognize as one. When an AI agent connects to internal systems and proprietary content, the protocol governing that connection determines whether the enterprise controls the terms of access or cedes them by default. Model Context Protocol (MCP) has become the standard linking agents to backend data and tools, and it is spreading through corporate technology stacks faster than the governance frameworks meant to secure it. For CIOs and CISOs, this stopped being a developer tooling question months ago. It is now a sovereignty question: who defines the boundary between an AI agent and a company's proprietary intelligence. The MCP Adoption Security Gap Gartner projects that by 2028, 25 percent of all enterprise Generative AI (GenAI) applications will experience at least five minor security incidents per year, up from 9 percent in 2025. That trajectory tracks closely with how fast MCP has been ...