Guild Group’s Mohammad Arif on the Security Risks of Enterprise AI

Autonomous AI agents are now accessing sensitive enterprise data, writing code, and executing workflows once reserved for trusted employees, fundamentally shifting the attack surface and enterprise trust model beyond traditional cybersecurity controls. Mohammad Arif, Head of Information Security at Guild Group, warns that most organisations are treating AI security as a future problem despite widespread adoption already underway, and advocates for embedding AI governance into procurement, data protection, identity management, and incident response as a board-level priority. Over the next 12 months, enterprises should expect AI-assisted social engineering, sensitive data leakage into unapproved tools, insecure AI integrations with excessive permissions, and third-party AI supply-chain risks to materialise across their expanded attack surface.