AI Governance News

Regulations, enforcement actions, research, and opportunities, tracked daily.

AI Governance Weekly

Weekly intelligence on AI regulation, enforcement, and governance. Every Thursday.

Content Type

Research Corporate Policy Weekly Recap Insight Standards Regulatory Announcement

Jurisdiction

Global US EU ISO/OECD/UN Australia United States China UK OECD Canada

Standards×

StandardsUS2026-07-15

DHS and CISA Push Mandatory Minimum Security Rules for AI Agents in Critical Infrastructure, Citing Prompt Injection and Blast-Radius Risks

A DHS-CISA analysis published in July 2026 urges federal regulators to move beyond voluntary guidance and establish mandatory minimum security requirements for AI agents deployed in critical infrastructure. The analysis calls specifically for prompt injection protections, documented human-override mechanisms, comprehensive audit logging of autonomous actions, and isolation architectures designed to limit the blast radius of a compromised agent. Sector-specific risk assessments addressing agent compromise likelihood and cascading impact are also recommended.

DHS CISA critical infrastructure agentic AI prompt injection audit logging isolation architecture mandatory requirements

StandardsGlobal2026-07-05

Agentic AI Governance Demands Dedicated Controls, Mayer Brown Guidance Finds: Least Privilege and Human Checkpoints Are the Core Requirements

Mayer Brown published practitioner guidance titled 'Governance of Agentic Artificial Intelligence Systems' on February 5, 2026, outlining how enterprises should adapt existing AI governance programs to address the distinct risks posed by autonomous agent systems. The guidance recommends pre-deployment testing across task execution, policy compliance, and tool usage robustness, alongside post-deployment behavioral monitoring. It emphasizes least-privilege technical controls and structured human oversight checkpoints as the foundational safeguards for agentic AI.

agentic AI least privilege human oversight agent testing agent drift technical controls Mayer Brown AI governance

StandardsGlobal2026-06-30

Academic Framework Proposes 7-Day Public Reporting Window for Tier 3 Agentic AI Incidents, Raising the Bar for Enterprise Anomaly Detection

A paper published on SSRN titled 'Transparent Real-Time Governance of Agentic AI Systems' proposes a tiered incident governance framework that would require AI Offices and National Authorities to publish public summaries of significant agentic AI events, including near-misses and blocked misuse attempts, within seven days of a Tier 3 classification. The framework targets agentic AI systems operating with meaningful autonomy and sets specific detection and reporting expectations for enterprise operators. Compliance teams deploying agentic AI should treat this as an early signal of the reporting granularity regulators may soon demand.

agentic AI incident reporting real-time governance anomaly detection near-miss disclosure

StandardsOECD2026-06-26

OECD Identifies Regulatory Gap Between Task-Specific and Fully Autonomous AI Agents, Urging Autonomy-Level Distinctions in Governance Frameworks

The OECD has published a working paper titled 'The agentic AI landscape and its conceptual foundations,' mapping how autonomous goal-directed behavior, planning, and action sequences are defined across existing literature. The paper identifies a structural gap in current regulatory frameworks that treat task-specific agents and fully autonomous agentic systems as equivalent. The OECD calls on policymakers to develop regulation that explicitly distinguishes between autonomy levels in agentic AI deployments.

agentic AI autonomy levels regulatory gaps OECD AI classification

StandardsUS2026-06-22

Voluntary Guidance Is Insufficient for Agentic AI in Critical Infrastructure, DHS and CISA Urged to Mandate Minimum Security Standards

A Homeland Security Today analysis argues that current voluntary frameworks leave critical infrastructure operators exposed to agentic AI attack vectors, including prompt injection and unconstrained autonomous action. The piece calls on DHS and CISA to mandate minimum security requirements for AI agents deployed in critical infrastructure sectors. Operators are urged to implement documented human-override mechanisms and robust audit logging before stricter regulations arrive.

critical-infrastructure agentic-ai prompt-injection mandatory-security CISA

StandardsGlobal2026-06-17

OWASP Agentic AI Report Flags Tool Poisoning and Multi-Agent Failures as Top Enterprise Governance Gaps

OWASP published the State of Agentic AI Security and Governance 2.0, a comprehensive practitioner report covering autonomous AI system risks, governance frameworks, and regulatory standards applicable globally. The report identifies tool poisoning and multi-agent coordination failures as priority risks and advises enterprise teams to shift from model-centric benchmarks to system-behavior evaluation. It is intended as a practical reference for deployment safety and compliance architecture.

Agentic AI Security Frameworks Multi-Agent Systems Tool Poisoning OWASP

StandardsGlobal2026-05-30

EU AI Act High-Risk Obligations Enforceable by August 2026, with Global Fragmentation Compounding Compliance Burden

A report from the British Institute of International and Comparative Law documents accelerating fragmentation in AI governance across the EU, US, and Asia-Pacific, and identifies 2 August 2026 as the date the EU AI Act's most consequential high-risk AI obligations become enforceable. The report highlights specific enterprise requirements including conformity assessments, quality management systems, fundamental rights impact assessments, human oversight controls, and data retention obligations.

EU AI Act EU United States Asia-Pacific regulatory fragmentation high-risk AI conformity assessment human oversight fundamental rights impact assessment compliance