[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-572448-105":53,"doc-detail-572448-en":120},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":113,"head_meta":115,"extra_data":117,"updated_unix":119},105,"en","securing-agentic-ai-an-addendum-on-securing-ai-systems-2025-addendum","SECURING AGENTIC AI - An Addendum on Securing AI Systems - 2025 - Addendum","","Agentic artificial intelligence (AI) systems are self-managing systems that plan, execute, critique, and iterate across multiple steps to meet specified objectives. Aimed at system owners, this addendum highlights how these capabilities expand organizational opportunities while introducing new risks tied to reduced human oversight, including boundary issues, control mechanisms, and potential emergent behaviours. Published by the Cyber Security Agency of Singapore (CSA) with partners, it adopts a risk-based approach across the AI development lifecycle, mapping agentic workflows to identify threat vectors and listing agentic risks and mitigations.",{"@graph":63,"@context":112},[64,80,95],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":41,"@type":70,"position":76},"https://docshare.wps.com/template/letters/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/securing-agentic-ai-an-addendum-on-securing-ai-systems-2025-addendum/572448/",4,{"url":78,"name":59,"@type":81,"author":82,"headline":59,"publisher":85,"fileFormat":88,"inLanguage":57,"description":61,"dateModified":89,"datePublished":89,"encodingFormat":88,"isAccessibleForFree":90,"interactionStatistic":91},"DigitalDocument",{"name":83,"@type":84},"dabgoudw","Person",{"url":68,"name":86,"@type":87},"DocShare","Organization","application/pdf","2026-10-13",true,{"@type":92,"interactionType":93,"userInteractionCount":4},"InteractionCounter",{"@type":94},"ViewAction",{"@type":96,"mainEntity":97},"FAQPage",[98,104,108],{"name":99,"@type":100,"acceptedAnswer":101},"What is the purpose of this addendum on securing agentic AI?","Question",{"text":102,"@type":103},"It provides a focused, practical resource for securing agentic AI systems, to be used alongside CSA’s Guidelines and Companion Guide on Securing AI Systems.","Answer",{"name":105,"@type":100,"acceptedAnswer":106},"How do agentic AI systems differ from traditional AI systems?",{"text":107,"@type":103},"They go beyond pattern recognition and predetermined responses by understanding context, formulating plans, and taking independent actions across multiple steps.",{"name":109,"@type":100,"acceptedAnswer":110},"What risk-based areas does the addendum cover across the AI development lifecycle?",{"text":111,"@type":103},"It maps agentic workflows to identify potential threat vectors and lists agentic AI-related risks and mitigations by capability throughout the development lifecycle.","https://schema.org",{"og:url":78,"og:type":114,"og:title":59,"og:site_name":86,"og:description":61},"article",{"robots":116,"canonical":78},"index,follow",{"doc_id":118,"site_id":56},572448,1791927440,{"code":4,"msg":5,"data":121},{"doc_id":118,"user_id":122,"nickname":83,"user_avatar":123,"doc_module":9,"category_id":40,"category_name":41,"doc_title":59,"doc_description":61,"doc_content":124,"file_id":125,"file_url":126,"file_type":127,"file_size":128,"view_count":4,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":129,"language":130,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":131,"faqs":132,"seo_title":133,"seo_description":61,"update_tm":119,"read_time":134},3985747860484,"https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","( DRAFT FOR PUBLIC CONSULTATION )  \nSECURING AGENTIC AI  \nAn Addendum to the Guidelines and Companion Guide on Securing AI Systems  \n2025  \n2  \nSECURING AGENT IC AI: AN ADDENDUM ON SECURING AI SYSTEMS  \nThis document is an addendum to CSA’s Companion Guide on Securing AI Systems (“Addendum”) , focusing on agentic AI systems. Systems owners should use this document in conjunction with the Companion Guide on Securing AI Systems as a resource.  \nThis document is meant as a community-driven resource, developed in collaboration with the AI and cybersecurity practitioner communities. It provides practical mitigation measures and practices to secure AI systems. This document is intended for informational purposes only and is not mandatory, prescriptive nor exhaustive .  \nDEVELOPED IN CONSULTATION WITH  \nThis document is published by the CSA, in collaboration with partners across the AI and Cyber communities, including:  \nAccenture Alibaba Cloud Amaris AI Cisco  \nDeloitte Singapore  \nDSO National Laboratories Fujitsu Limited  \nGoogle Asia Pacific Pte. Ltd.  \nGovernment Technology Agency (GovTech)  \nHP Inc.  \nKaspersky Lab Singapore Pte Ltd Microsoft Singapore  \nPalo Alto Networks  \nPricewaterhouseCoopers Risk Services Pte Ltd Resaro  \nThe American Chamber of Commerce in Singapore (AmChamSG)  \nVulcan ([vulcanlab.ai](vulcanlab.ai))  \n3  \nSECURING AGENT IC AI: AN ADDENDUM ON SECURING AI SYSTEMS  \nDISCLAIMER  \nThe information provided in this document does not, and is not intended to, constitute legal advice. All information is for general informational purposes only. These organisations provided views and suggestions on the security controls, descriptions of the security control(s), and technical implementations included in this Addendum. CSA and its partners shall not be liable for any inaccuracies, errors and/or omissions contained herein nor for any losses or damages of any kind (including any loss of profits , business, goodwill, or reputation, and/or any special, incidental, or consequential damages) in connection with any use of this Addendum. Organisations are advised to consider how to apply the controls within to their specific circumstances, in addition to other measures relevant to their needs. This document contains links to other third-party websites. Such links are informational and do not represent endorsement of content from these third-party sites.  \n4  \nSECURING AGENT IC AI: AN ADDENDUM ON SECURING AI SYSTEMS  \nVERSION HISTORY  \nVERSION DATE RELEASED  \nREMARKS  \n0.1  \n22 Oct 2025  \nRelease of Addendum on Securing Agentic AI for Public Consultation  \n5  \nSECURING AGENT IC AI: AN ADDENDUM ON SECURING AI SYSTEMS  \nEXECUTIVE SUMMARY  \nAgentic artificial intelligence (AI) systems are self-managing AI systems that can plan, execute, critique, and iterate across multiple steps to achieve specified objectives. These systems represent a significant evolution from traditional AI systems, moving beyond simple pattern recognition and predetermined responses to demonstrate increasingly sophisticated abilities to understand context, formulate plans, and take independent actions to achieve specified objectives. Development of these systems bring new capabilities and opportunities for organisations and users.  \nOrganisations must carefully consider both the transformative potential and inherent risks these agentic AI systems present. Their capacity to operate with reduced human oversight introduces novel security considerations around system boundaries, control mechanisms, and the potential for unexpected emergent behaviours. Understanding and addressing these security implications is crucial as agentic AI becomes more prevalent in our digital infrastructure and business operations.  \nThe Cyber Security Agency of Singapore (CSA) has developed this addendum to advise system owners on securing their agentic AI systems. This addendum is meant to be read together with the Guidelines and Companion Guide on Securing AI Systems, which outline","cbCaibSTQTd6Ukuw","https://ap.wps.com/l/cbCaibSTQTd6Ukuw","pdf",1570921,97,"English","# Quick Reference Table\n# 1. Introduction\n# 2. How Agentic AI Works\n## 2.1. Baseline Components\n## 2.2. Baseline System Design\n## 2.2.1. Agentic AI system architecture\n## 2.2.2. Roles & access control\n## 2.2.3. System workflows & autonomy\n## 2.3. Capabilities\n# 3. Security Threats","[{\"question\":\"What is the purpose of this addendum on securing agentic AI?\",\"answer\":\"It provides a focused, practical resource for securing agentic AI systems, to be used alongside CSA’s Guidelines and Companion Guide on Securing AI Systems.\"},{\"question\":\"How do agentic AI systems differ from traditional AI systems?\",\"answer\":\"They go beyond pattern recognition and predetermined responses by understanding context, formulating plans, and taking independent actions across multiple steps.\"},{\"question\":\"What risk-based areas does the addendum cover across the AI development lifecycle?\",\"answer\":\"It maps agentic workflows to identify potential threat vectors and lists agentic AI-related risks and mitigations by capability throughout the development lifecycle.\"}]","SECURING AGENTIC AI - An Addendum on Securing AI Systems - 2025 - Addendum | PDF",34]