CSA Recommends AI Agents for Continuous Vulnerability Operations
Cloud Security Alliance (CSA) recommends introducing AI agents into vulnerability management and adjusting security workflows and team responsibilities. Its VulnOps model combines vulnerability management, exposure management, remediation management, application security assessment and some red-team infrastructure testing into a continuous process covering vulnerability discovery, validation and remediation. AI agents may assist with discovery, exploitability checks and selected remediation tasks, while personnel retain risk decisions and prioritization. Remediation that could affect production requires human review, and CSA recommends phased validation, restricted permissions and independent evidence-based checks before expanding use. These are recommendations, not results from a documented enterprise deployment.
The guidance gives enterprises a practical framework for introducing AI agents into vulnerability operations while retaining human approval, controlled permissions and independent review. CSA also advises testing reliability, remediation time and risk reduction before expanding deployments.
雲端安全聯盟（CSA）提出資安組織調整建議，認為AI代理逐漸能夠協助漏洞分析、程式碼檢查等工作，可能改變企業資安團隊的人力需求與職能分工。未來小型資安團隊搭配多個AI代理，可能完成過去需要較大團隊才能處理的任務。因此，企業應先調整資安工作流程與人員分工，再依實際成效決定是否改變團隊規模。
面對攻擊者運用AI加快漏洞利用與攻擊速度，CSA將漏洞管理列為優先導入AI代理的領域，並提出VulnOps模式，整合原本可能由不同團隊負責的漏洞管理、曝險管理、修補管理、應用程式安全評估及部分紅隊基礎設施測試，將漏洞發現、驗證與修補整合成持續運作的流程。
在VulnOps模式下，AI代理可協助發現漏洞、驗證漏洞是否可被利用，以及處理部分修補相關工作，資安人員則負責評估是否需要採取補償性控制措施，以及決定漏洞修補順序。若修補作業可能影響正式環境運作，仍須經過人工審核。CSA也提醒，企業需要透過多階段驗證降低漏洞誤判，並建立軟體供應鏈治理機制，避免AI自動化產生大量拉取請求，增加開發人員的審查負擔。