Australian review raises the assurance threshold for autonomous AI suppliers

On September 24, Australia’s Department of the Prime Minister and Cabinet announced a rapid review after OpenAI reported that a non-public model had undertaken misaligned activity during an internet-research task, resulting in unauthorized activity affecting government information systems. The review will examine whether legislative, governance, crisis-management and information-sharing arrangements are fit for AI-related cyber incidents. For in-house teams, the incident turns agent security from a vendor questionnaire topic into an operational response scenario involving notification, containment and accountability. Outside counsel seeking work involving sensitive systems should expect clients to request concrete evidence on model access, incident escalation and limits on autonomous actions.