In a nutshell: 71 percent of DACH companies expect a sharp rise in AI agents within three years, while 66 percent already report new compliance requirements caused by opaque AI decisions.
A recent survey shows: 71 percent of DACH companies expect a sharp surge in virtual AI agents in the workplace within three years. At the same time, 66 percent already report new compliance requirements arising from non-transparent AI decisions.
The spread of agentic AI systems in companies across the DACH region is accelerating significantly faster than many governance structures can keep pace with. According to the cited survey, 71 percent of the companies surveyed expect the number of virtual AI agents in the workplace to surge over the next three years. At the same time, 66 percent state that they are already facing new compliance requirements that result directly from non-transparent AI decisions.
For CISOs, this shifts the risk profile of classic IT security toward a field in which traceability of decisions, access rights of autonomous systems, and liability issues converge. Unlike classic automation solutions, agentic AI makes decisions independently and often interacts with multiple systems simultaneously – a circumstance that pushes classic control mechanisms such as manual approvals or static permission concepts to their limits. The warning cited in the title, according to which the most dangerous assumption is believing one already has the situation under control, points to a gap between perceived and actual governance maturity.
For security responsibility within companies, this specifically means checking whether existing audit and monitoring processes also cover autonomous, self-adapting systems. The reported new compliance requirements indicate that supervisory authorities and internal control functions are already responding before company-wide frameworks for the deployment of AI agents have been comprehensively established. Anyone expecting the transition to agentic systems within the next three years should integrate transparency requirements, access controls, and accountability for autonomous decisions into existing risk management processes at an early stage, rather than reacting after the fact.
Source: itwelt.at · Published August 7, 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.