Forrester's 2027 Asia Pacific predictions, published this week, carry a number every security team should sit with: one in three large enterprises in the region will uncover at least 10 employee-built shadow AI agents for every officially sanctioned one. Forrester separately predicts that an employee's personal AI agent will trigger an incident at a Fortune 500 company, because existing access controls can verify who an agent acts as, but not what it intends to do.

This is not a hypothetical future. Forrester's 2026 threat report already ranked agent threats, AI identity sprawl, and AI software supply chain risk among the top five threats organizations face this year.…