Federico Cerutti at the Richmond Cyber Resilience Forum: governing agent autonomy in cyber security

On 11 and 12 May 2026, Federico Cerutti will speak at the Richmond Cyber Resilience Forum Spring in Rimini with a talk titled Governing agent autonomy in Cyber Security.

The talk addresses one of the most relevant issues for cyber organisations today: the entry of Agentic AI systems into cyber processes. These systems do more than suggest or summarise information; they can observe context, use tools, make intermediate decisions, and produce effects in the operating environment.

This evolution creates important opportunities for incident handling, cyber threat intelligence, and support during ransomware crises. At the same time, it changes the nature of risk: when a system can act, the central question is no longer only how accurate its answer is, but how operational delegation is governed.

The talk will offer a technical and organisational reading of the topic, with knowledge as a condition of governability. Sources, memory, data provenance, context representation, policy, and information-state quality are not implementation details: they are part of the control architecture that makes safe delegation possible.

Mandate, permissions, evidence, and escalation criteria are what keep autonomy, control, and organisational trust aligned.

Materials

The talk handout and talk slides are also available.