Board & CISO
The CISO Autonomy Mandate: Command, Control, and Governance for Agentic AI Systems
Abstract
The shift from securing human-controlled systems to governing autonomous AI fundamentally redefines the CISO mandate. This report establishes the operational and strategic foundations of CISO authority in the age of agentic AI. Covers command authority over autonomous systems, control architecture for non-human identities, governance metrics tied to board-level risk, escalation authority during autonomous system failures, and the organizational structures required to exercise meaningful oversight.
Table of Contents
- 01The CISO in the Age of Agentic AI
- 02Command Authority Over Autonomous Systems
- 03Control Architectures for Non-Human Identities
- 04Governance Metrics and Board Accountability
- 05Escalation Authority and Crisis Decision-Making
- 06Organizational Structure for Agentic Oversight
- 07Mandate Alignment with Board and Executive
- 08Implementing the Autonomy Mandate