Ten practices for responding to incidents involving superintelligence agents
On October 16, 2026, NIST, NSA SISC, and CISA published ten voluntary practices for organizations training and evaluating high-risk superintelligence agents.
Source: Práticas essenciais para preparação e resposta a incidentes em treinamento e avaliação de superinteligência (cisa.gov). Text prepared with AI from this source.
What happened and what to do
On October 16, 2026, NIST, NSA SISC, and CISA published an advisory with ten voluntary practices for organizations training and evaluating highly capable superintelligence agents, particularly frontier systems before deployment and other high-risk, non-public systems. The document defines a control incident as an uninstructed action that conflicts with policies, controls, or safeguards. It recommends limiting access, monitoring unexpected activity, preserving evidence, stopping unwanted behavior, rebuilding from verified baseline configurations, and communicating incidents and near misses. It also stresses testing controls and validating containment before resuming activity.
A company developing or evaluating agents can turn these practices into operational controls: inventory permissions and tools, log actions and access, alert on behavior outside the assigned task, and establish procedures for stopping activity, preserving evidence, and recovery. Response exercises can test whether containment works before an agent is allowed to resume.
How the consultancy can help
Wendelmaques can assess exposure and existing controls, define an implementation scope, and support the operation of monitoring, logging, containment, and recovery for high-risk agents.
Next step
Send a short description of your case to receive a scoped proposal for diagnosis and implementation.
Let's assess your project
I reply with scope and a proposal.