UAE Security Teams: 52% Have Found an Agent Acting Beyond Its Authorization, 54% Faced an Unexplainable AI Decision

An IDC, CPX and Microsoft study finds half of UAE security teams have caught an AI agent exceeding its authorization.

The IDC, CPX and Microsoft UAE study of 175 executives finds 98% of security teams have met at least one real AI security risk in production. 52% have found an agent exceeding its authorization, 44% have not defined maximum permissions per agent role, and 52% have identified data leakage through unsanctioned tools. Some 54% have faced an AI decision that could not be explained or audited for compliance. Explainability failures are a compliance exposure, not a research problem.

Reported by: Middle East AI News, Oct 16

Norm's Take

Half of UAE security teams have caught an AI agent exceeding its authority.

Before any agent goes live, insist on:

  1. A maximum permission set per agent role44% of UAE security teams have not defined maximum permissions per agent role.
  2. An audit trail a regulator could read54% have faced an AI decision that could not be explained or audited for compliance.
  3. A sanctioned-tools list52% have identified data leakage through unsanctioned tools.

One story a day, and the decision it puts in front of you.

Get Norm's Daily Brief

Analysis and opinion, not investment or legal advice. © 2026 Norm E. Murray. All Rights Reserved.

Found this useful? Share on LinkedIn →
Norm E. Murray, AI Leadership Advisor
About the author
Norm E. Murray
AI Leadership Advisor · Psychologist · Economist
Norm advises CEOs, boards and senior leaders on the psychology and economics of AI adoption: what AI does to leaders and organizations, not just what it does. He has led global businesses across multiple continents and writes The Norm Report for executives navigating the AI shift.
More about Norm →

Get Norm's Daily Brief

One story a day, and the decision it puts in front of you. Free, in your inbox.

Free. One email a day. Unsubscribe anytime with one click.

If something in this analysis bears on a decision you're facing, don't sit on it.

Speak with Norm

More From Norm's Edge

Norm’s Edge is analysis and opinion intended for senior executive and board-level audiences. It does not constitute legal, financial, investment, compliance or regulatory advice. Stories are drawn from third-party reporting that may be unconfirmed. Readers should seek independent professional counsel before making decisions based on any content published here. Norm E. Murray does not accept any liability for actions taken in reliance on this analysis.

© 2026 Norm E. Murray. All rights reserved. No part of this publication may be reproduced, distributed or transmitted in any form without the prior written permission of the author.