At many organizations, AI agents are no longer experimental. While use of this autonomous technology grows, companies are relying on immature controls to rein it in. Three recent reports detail multiple types of security and privacy breaches already occurring due to organizations’ inadequate policies, limited monitoring and failure to appropriately treat AI agents as risks in their systems. The first article in a two-part series on real-world security for AI agents examined the reports’ benchmarks of incident types, and the safeguards and security measures that companies so far are applying to agents. Part two provided an action plan for CISOs and lawyers to strengthen security and reduce risks around AI agents, with expert perspectives from agent security specialists at Barndoor, Gravitee, Gray Swan, Skyflow and ZwillGen.