Germany’s cybersecurity agency BSI and the TÜV-Verband surveyed 505 German companies, published October 7, 2026. Of 246 using AI, 64% restrict access rights and 40% log or monitor use. Only 5% of AI users run agents, yet 84% of all companies rate agent errors a high risk.