Artificial intelligence is no longer sitting at the edge of enterprise experimentation. Across the Asia Pacific, AI assistants and autonomous agents are moving into live business environments, embedded across email, customer support, internal messaging, cloud applications and collaboration workflows.

That shift is creating an enormous opportunity. AI can help organisations move faster, automate routine work, improve customer experience and support better decision-making. But it is also changing the security equation. As AI becomes part of how work gets done, it is expanding where risk appears, how quickly incidents move, and how difficult it is for security teams to investigate what happened.

Proofpoint’s 2026 AI and Human Risk Landscape report shows that AI adoption in Singapore has already moved well beyond the pilot stage. 87 per cent of organisations in Singapore have deployed AI assistants beyond the pilot stage, and 70 per cent are actively piloting or rolling out autonomous agents. Yet security readiness has not kept pace. Close to three-fifths of these organisations describe their AI security posture as catching up, inconsistent or reactive. 38 per cent have already experienced a suspicious or confirmed AI-related incident.

This is the gap that should concern security leaders. AI is not waiting for governance frameworks to mature. Security leaders in Asia are under more pressure to address key areas of concern.

AI has expanded the attack surface

For many years, cybersecurity strategies were built around familiar control points: email, endpoints, cloud applications, identities and data repositories. Those still matter. But AI is now connecting these environments in new ways, allowing risk to move across workflows at machine speed.

In Singapore, email remains the most common AI-related threat vector, affecting 58 per cent of organisations. But exposure now extends much further: SaaS and cloud applications at 44 per cent, AI assistants or agents at 41 per cent, and collaboration tools such as Teams or Slack at 44 per cent. Among organisations that experienced an AI-related incident, exposure rises across every channel, including 61 per cent in file sharing platforms and 58 per cent involving collaboration tools.

Also Read: Singapore’s data analysts trust AI to work, not to think

This matters because enterprise work no longer happens in a single channel. A sensitive document may move from email into a collaboration platform, be summarised by an AI assistant, stored in a cloud application, and referenced by an autonomous workflow. Each step creates another point where data, identity and intent need to be understood.

Many organisations already have some forms of AI security controls, for example, monitoring shadow AI applications. However, the critical visibility is whether those controls can see across the connected environment how AI is actually being used.

Data security and AI security are the same problem

One of the most common structural errors in how organisations approach AI security is treating it as a separate workstream from data security. It is not. They are facets of the same problem, and solving one without addressing the other creates compounding exposure.

The earliest AI security challenge was clear: employees were using consumer AI tools to process sensitive business information. In 2025, 63 per cent of employees who used AI applications uploaded confidential company data, such as source code and customer records, to personal chatbot accounts. According to IBM’s Cost of a Data Breach Report, shadow AI breaches cost an average of US$670,000 more than standard security incidents, driven by delayed detection and difficulty determining the scope of exposure.

The second wave is more complex. As organisations moved to enterprise AI platforms — Microsoft Copilot, Salesforce Einstein, and others — the question became not whether data was leaving the organisation, but whether AI tools were accessing only the data they were supposed to. That is a data security problem expressed through an AI lens.

The third wave is real-time and agentic. Autonomous agents do not just respond to prompts. Similar to humans, they connect to external tools and MCP servers, acquire new capabilities, and act on data across connected systems. Understanding what an AI agent is doing requires capturing not just the prompt and response, but every tool call and downstream action in between. When security teams do not have visibility into what AI is connecting to and acquiring, they cannot tell the board they have it under control.

Also Read: AI-powered business automation: How SMEs are transforming operations in Southeast Asia

Gartner projects that by the end of 2026, up to 40 per cent of enterprise applications will integrate with AI agents, up from less than five per cent in 2025. It also predicts that by 2028, 25 per cent of all enterprise GenAI applications will experience at least five minor security incidents per year, up from nine per cent in 2025. The risk is scaling faster than governance.

Security and data governance teams need a shared view: what data exists, who and what has access to it, and how AI agents are actually using it. Having a clear view of all your data is not fictional, and it should be the foundation of building robust AI security for any organisation.

Tool sprawl is holding security teams back

Fragmented security stacks are compounding the challenge. Almost all organisations in Singapore say managing multiple security tools is at least moderately challenging, and 61 per cent describe it as very or extremely difficult. Respondents cite operational cost pressures, integration challenges and difficulty correlating threats.

When controls sit in separate systems, security teams lose time moving between dashboards, reconciling alerts and trying to connect activity across email, cloud, collaboration and AI systems. That delay matters when incidents can spread across workflows quickly.

As AI scales, security architecture becomes a strategic priority. More than half of Singapore organisations are actively pursuing vendor and tool consolidation, and 58 per cent believe a unified platform is more effective than point solutions. This reflects a broader shift. Organisations are recognising that AI security cannot be solved with isolated controls. It requires an architecture that can protect people, data and AI systems across the channels.

AI adoption in Singapore and Asia Pacific is not slowing down. The boards and CEOs driving it are right that falling behind carries a real competitive cost. The security leaders are now in a perfect position to enable this AI innovation with the visibility to secure it, govern it, and defend it. That is what setting the pace looks like.

—

Editor’s note: e27 aims to foster thought leadership by publishing views from the community. You can also share your perspective by submitting an article, video, podcast, or infographic.

The views expressed in this article are those of the author and do not necessarily reflect the official policy or position of e27.

Join us on WhatsApp, Instagram, Facebook, X, and LinkedIn to stay connected.

The post AI is already inside the enterprise. Has security kept up in Asia? appeared first on e27.