Enterprise Security Leaders Pivot to Active AI Control
As shadow AI usage grows, companies are shifting from total bans to monitoring to mitigate significant financial risks.
Updated on Oct. 16, 2026 in Artificial Intelligence
Live Poll
Do you believe allowing employees to use personal AI tools at work creates too much risk?
Enterprise security leaders are moving away from bans on artificial intelligence toward active management of visibility and control. New reports from Gartner and IBM indicate that shadow AI, or the unauthorized use of generative AI tools, now poses significant financial and security risks for organizations.
Why it matters
Blocking AI services has proven ineffective as employees continue using unauthorized tools, necessitating a pivot to visibility and policy management. This shift addresses the growing financial impact of shadow AI while preparing firms for the rapid proliferation of autonomous agents.
Organizations with high levels of shadow AI face an average cost penalty of $670,000 compared to their more secure counterparts. While cybersecurity leaders monitor for activity, 69% already report evidence of employee-led unauthorized use across their networks.
The players
Gartner
A global research and advisory firm providing data-driven insights into IT security and enterprise technology trends.
IBM
A technology corporation that provides hardware, software, and cloud-based services, frequently publishing enterprise security research.
Fortinet
A cybersecurity company known for its FortiGate firewall products and network security hardware.
The details
Organizations are leveraging network conduits like FortiGate to gain visibility into shadow AI activity that bypasses standard protocols. Virtual patching—a security method that applies immediate protections to vulnerable systems before formal software upgrades are implemented—is being used to mitigate risks. By shifting from outright prohibition to structured policy and coaching, firms attempt to balance employee productivity with data compliance.
Timeline
2028: Fortune 500 enterprises are projected to have 150,000 AI agents in use.
2030: Gartner projects 40 percent of organizations could face security incidents linked to shadow IT.
The Tech Race
This move to active visibility follows the long-standing industry pattern of managing shadow IT, but at an unprecedented scale. As the number of AI agents grows, the race is on for security platforms to provide automated control before 2030.
IT professionals should expect stricter monitoring and new policy frameworks governing which generative AI tools are permitted for corporate use. The focus is shifting toward tools that provide immediate visibility into network traffic to prevent unauthorized data exposure.
The takeaway
The era of banning generative AI is ending in favor of comprehensive management and visibility. Security teams should monitor their network's agent usage closely as the 2028 projection for 150,000 agents approaches for large enterprises.
Further reading
For broader trends in secure implementation, see our coverage on Artificial Intelligence.
Source note: This article includes information reported by SecurityBrief Asia.
Live Poll
Do you believe allowing employees to use personal AI tools at work creates too much risk?
