Topic starter
18/08/2026 2:32 pm
TL;DR: AI agents should operate as digital staff officers in DDIL environments, translating human intent into coordinated cyber actions while deterministic systems handle detection and execution, according to CRACKEN. The model is designed to keep working when connectivity, power, and personnel are disrupted, and the governance implication is that resilience now depends on bounded delegation, auditability, and human recoverability, not just smarter automation.
Editorial analysis by NHI Mgmt Group, based on content published by CRACKEN: “Cyber Capacity as a Systemic Model: Agent-Augmented Defense and Offense in DDIL Environments”.
Key questions
Q: What breaks when agentic cyber defence depends on constant connectivity?
A: The control model breaks when approval, orchestration, and logging all assume the operator is always online.
Q: Why do DDIL conditions change the risk calculus for autonomous cyber operations?
A: They change it because the main failure is no longer speed or accuracy, but recoverability.
Q: What do security teams get wrong about deploying AI safely?
A: They often assume deployment marks the end of assurance, when it actually marks the beginning of continuous governance.
Practitioner guidance
- Define bounded agent authority Specify which cyber actions an agent may take without approval, which require human confirmation, and which remain fully manual under degraded conditions.
- Separate orchestration from execution Keep detection, response execution, and state changes deterministic, while limiting agents to translation, sequencing, and task coordination.
- Instrument full action logging Record every agent decision, tool invocation, and policy override so the human operator can reconstruct actions after reconnecting.
Bottom line: Agent-augmented cyber defence only remains governable when AI is constrained to orchestration and humans retain command authority.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
18/08/2026 3:19 pm
DDIL changes the governance problem from automation efficiency to operational recoverability. In stable environments, teams can afford to optimise for speed and analyst convenience. In denied or intermittent environments, the real question is whether the system can still act safely when the operator cannot stay connected. That shifts the control objective from smarter automation to bounded delegation, traceable execution, and human reclaimability.
A few things that frame the scale:
- 67% of organisations still rely heavily on static credentials despite the risks they pose to agentic AI deployments, according to the 2026 Infrastructure Identity Survey.
- 53% of security leaders expect AI to run major portions of their infrastructure autonomously within the next three years, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: How should organisations govern delegated authority for agentic cyber systems?
A: They should treat delegated authority like privileged access, with explicit scope, session boundaries, logging, and revocation. The key is to make every agent action attributable to a human-defined mission and reversible by a human reviewer. Without that, the system may remain active but it will not remain governable.
👉 Read our full editorial: Agent-augmented cyber defence in DDIL environments changes governance