{"id":16533,"date":"2026-07-30T13:06:50","date_gmt":"2026-07-30T13:06:50","guid":{"rendered":"https:\/\/newestek.com\/?p=16533"},"modified":"2026-07-30T13:06:50","modified_gmt":"2026-07-30T13:06:50","slug":"ai-agents-gain-access-to-financial-workflows-amid-growing-governance-gaps","status":"publish","type":"post","link":"https:\/\/newestek.com\/?p=16533","title":{"rendered":"AI agents gain access to financial workflows amid growing governance gaps"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n
<\/div>\n<\/section>\n

AI agents are now being allowed to create business records, approve transactions, and execute financial workflows. ERP security firm Pathlock says most organizations don\u2019t know if that is all they are doing.<\/p>\n

The company\u2019s 2026 AI Governance Gap Report found that 79% of organizations do not have a dedicated AI governance team, despite AI agents being increasingly plugged into business-critical operations like finance, procurement, HR, and supply chain applications.<\/p>\n

More than half of the organizations surveyed by Pathlock said they can\u2019t fully verify actions AI agents execute across these business systems.<\/p>\n

\u201cFor decades, governance focused on controlling who could access a system,\u201d said Susan Stapleton<\/a>, GRC expert at Pathlock. \u201cAI agents introduce a different challenge: understanding what actually happened after access was granted.\u201d Being able to verify, trace, investigate, and explain AI-driven actions in real time across business applications will determine an organization\u2019s AI preparedness, she added.<\/p>\n

<\/a>Agents moving from copilots to financial operators<\/h2>\n

The survey suggested enterprises are already trusting AI agents with responsibilities that until recently belonged exclusively to employees.<\/p>\n

Among surveyed respondents, 38% said AI agents can create or modify vendors and other business records, 35% allow them to execute cross-system workflows, and 28% permit them to approve transactions. More than one-third (36%) have already deployed, or are actively implementing, AI agents within finance and accounting environments.<\/p>\n

Most notably, about one in four organizations allow AI agents direct access to backend databases, Pathlock said in a report<\/a> that CSO reviewed ahead of its publication.<\/p>\n

Chris Radkowski<\/a>, another GRC expert at Pathlock, said three trends are converging simultaneously: the growth of machine identities, increasingly interconnected enterprise applications, and AI agents capable of executing business processes autonomously.<\/p>\n

The findings illustrate why machine identities are becoming a problem for security, said Crystal Morin<\/a>, senior cybersecurity strategist at Sysdig. \u201cAs automation and AI-driven development explode, the gap between human and machine identities is becoming one of the defining security challenges of our time,\u201d Morin said. \u201cBusinesses must treat machine identities as the new firewall.\u201d<\/p>\n

<\/a>Governance is still catching up<\/h2>\n

While enterprises have begun introducing governance controls, the report argues most remain rooted in human-centric security models that focus on who receives access rather than what autonomous systems actually do after access is granted.<\/p>\n

Only 19% of organizations said they have complete, real-time visibility into AI agent activity across business systems, while 53% admitted they cannot fully verify AI-driven actions. Nearly half (48%) cannot trace AI activity end-to-end across multiple systems, making it difficult to reconstruct how an AI-driven outcome was produced.<\/p>\n

Investigation capabilities remain equally immature. Just 13% can investigate AI incidents in real time, while 22% cannot reliably investigate AI-driven actions at all.<\/p>\n

Ram Varadarajan<\/a>, CEO at Acalvio, said traditional security approaches are unlikely to help. \u201cGeneral-purpose AI and traditional \u2018check-the-box\u2019 security audits are a false comfort when the actual battle is moving in milliseconds,\u201d he said. \u201cTo maintain competitive edge and protect valuation, companies have to pivot from reactive defense to active, game-theoretic defense.\u201d<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

AI agents are now being allowed to create business records, approve transactions, and execute financial workflows. ERP security firm Pathlock says most organizations don\u2019t know if that is all they are doing. The company\u2019s 2026 AI Governance Gap Report found that 79% of organizations do not have a dedicated AI governance team, despite AI agents being increasingly plugged into business-critical operations like finance, procurement, HR,… <\/p>\n

Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-16533","post","type-post","status-publish","format-standard","hentry","category-uncategorized","is-cat-link-borders-light is-cat-link-rounded"],"_links":{"self":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts\/16533","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=16533"}],"version-history":[{"count":0,"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts\/16533\/revisions"}],"wp:attachment":[{"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=16533"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=16533"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=16533"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}