Canadian IT leaders weigh AI agent risks & opportunities

Canadian IT security leaders are expressing both optimism and concern over the role of artificial intelligence (AI) agents in cyber security, according to a new report from Salesforce.

The State of IT Security report, which draws from a global survey of more than 2,000 enterprise IT security leaders, includes responses from 200 Canadian participants. The findings indicate that while 99% of Canadian IT security leaders believe AI agents can improve at least one security concern, a majority are questioning whether AI can be fully trusted to manage sensitive data and critical operations.

The report reveals a widespread recognition among Canadian IT leaders that their organisations' security practices are in need of change, with 85% indicating transformation is necessary. This sentiment appears to be driven by both the opportunities and the challenges posed by AI in the security domain.

According to the survey data, 86% of security, privacy, and compliance leaders in Canada view AI agents as creating new possibilities for improving security. Currently, 41% of IT security teams in Canada are utilising AI agents as part of their daily routine. This adoption rate is expected to grow substantially over the next two years as organisations seek to enhance their security operations with the assistance of autonomous AI tools.

However, concerns remain regarding the readiness of existing systems to take full advantage of AI technology. The report found that 56% of Canadian IT leaders are worried their data infrastructure is not optimally prepared to support AI agents. Additionally, 61% report a lack of complete confidence in their ability to implement AI agents with sufficient safety measures and governance in place.

The increasing complexity and sophistication of AI-driven cyber threats is a central issue for many security leaders. According to the survey, 78% of Canadian IT leaders believe that AI-powered threats will soon outpace the defence capabilities offered by traditional security measures. This anticipation adds urgency to calls for a stronger focus on the data foundations necessary for responsible AI adoption.

Salesforce's own perspective emphasises the importance of strong data governance as a prerequisite for securely deploying AI agents in security roles. Alice Steinglass, speaking on behalf of the company, stated, "Trusted AI agents are built on trusted data. IT security teams that prioritize data governance will be able to augment their security capabilities with agents while protecting data and staying compliant."

The dynamics of AI in cyber security are also affected by the dual use of the technology by both defenders and those seeking to exploit vulnerabilities. AI agents promise to reduce manual workloads for security teams, potentially allowing human personnel to dedicate more time to complex analytical tasks. Despite these advantages, the report cautions that any move towards agentic AI must be supported by robust data infrastructure and rigorous governance procedures in order to maintain compliance and effectively mitigate risks.

The findings reflect a cautious optimism among Canadian IT security professionals. While there is near-unanimous belief in the potential for AI agents to address key security issues, most leaders acknowledge gaps in their current ability to ensure that AI solutions are adequately safeguarded and compliant with regulatory requirements.

The report's insights highlight the need for targeted investments in data systems and governance to facilitate secure integration of AI agents in enterprise environments. As AI continues to evolve and play a larger role in cyber security, Canadian organisations are facing critical decisions on how best to balance the potential benefits of automation with the demands for trust, compliance, and effective risk management.