NIST NCCoE to Host Webinar on Agentic AI in DevSecOps, Highlighting New Resources

The NIST National Cybersecurity Center of Excellence (NCCoE) is holding a webinar today, October 28, 2026, to present new resources and discuss the future of Agentic AI within DevSecOps. This initiative is part of their ongoing project to demonstrate the implementation of the NIST Secure Software Development Framework (SSDF) using modern DevSecOps pipelines and commercially available technologies. The webinar will specifically address Build 3 of this project, which focuses on demonstrating the use of agentic AI capabilities for code development, building, and testing. This builds upon previous work that showcased human-directed generative AI, indicating a significant shift towards more autonomous AI integration in the software development lifecycle. This development is highly significant for DevSecOps practitioners because it directly addresses the evolving role of AI in software security. As AI models become more autonomous, their integration into critical development and operations workflows presents both immense opportunities and complex challenges. The NCCoE's focus on Agentic AI in DevSecOps signifies a recognition that traditional security approaches may not be sufficient for AI-driven development. It underscores the need for new frameworks and practices to govern AI agents, ensure their secure operation, and maintain auditability and human oversight in increasingly automated environments. This impacts anyone involved in securing software supply chains, managing cloud infrastructure, or developing AI-powered applications. This move by NIST aligns with a broader industry trend where AI is rapidly becoming an integral part of the software development lifecycle. Reports from earlier in 2026 already highlighted that 97% of organizations are using or planning to use AI in the SDLC, and 85% believe agentic AI works best with platform engineering. The increasing sophistication of AI-driven attacks, as evidenced by events like "Black October" where AI found decade-old flaws and attackers exploited them rapidly, further emphasizes the urgency of integrating AI into defensive strategies. The NCCoE's work provides a crucial, vendor-neutral perspective on how to responsibly adopt these powerful technologies, moving beyond theoretical discussions to practical, demonstrable implementations. In practice, DevSecOps teams should view this webinar and the associated NIST resources as essential guidance for navigating the complexities of AI integration. Key implications include the need to develop robust identity and authorization mechanisms for AI agents, as the NCCoE project will specifically address this. Practitioners should also focus on establishing clear governance policies for AI-assisted code generation, testing, and deployment, ensuring that human-in-the-loop mechanisms are in place where necessary. The emphasis on continuous feedback loops and evidence collection, as discussed in related DevSecOps workshops, will be paramount for maintaining security and compliance in an agentic AI landscape. Organizations should actively engage with these new NIST resources to understand how to leverage AI for enhanced security while mitigating the inherent risks of increased automation and autonomy.