AI has become an essential component of cybersecurity, with the majority of cybersecurity providers emphasizing the incorporation of AI into their products and services. This trend is evident across conferences, events, and trade shows focused on cybersecurity, highlighting AI as a key capability for effective cyber defense strategies.
Although AI is widely utilized in cybersecurity, it is not a one-size-fits-all solution and the effectiveness of AI in delivering cybersecurity outcomes is not guaranteed. A recent report delves into the use of AI in cybersecurity, particularly focusing on generative AI. The report draws insights from a survey of 400 IT and cybersecurity leaders working in small and mid-sized organizations, shedding light on the adoption, expected benefits, and levels of risk awareness associated with AI in cyber defenses.
The survey findings serve as a benchmark for organizations evaluating their cybersecurity strategies, emphasizing the importance of understanding the risks and benefits of AI in enhancing cybersecurity posture. AI encompasses various capabilities, with deep learning models and generative AI being commonly used in cybersecurity. Deep learning models apply learnings to tasks, while generative AI creates new content based on assimilated inputs.
The survey indicates that AI adoption is prevalent, with 98% of organizations using AI in some capacity. Furthermore, AI capabilities are increasingly becoming a requirement when selecting a cybersecurity platform, with 99% of organizations considering AI capabilities essential. As organizations embrace AI, it is crucial to grasp the risks associated with AI implementation in cybersecurity.
Organizations have high expectations for generative AI capabilities in cybersecurity tools, aiming for improved cyber protection and business performance. The survey highlights varying desired benefits from GenAI, with organizations prioritizing different outcomes based on their size and challenges. While organizations seek to leverage AI for enhancing cybersecurity, they are also aware of the potential risks and challenges.
One major risk associated with AI in cybersecurity is the use of poor quality and poorly implemented AI models, which can introduce significant cybersecurity vulnerabilities. Organizations are concerned about flaws in cybersecurity tools’ generative AI capabilities and emphasize the importance of assessing the caliber of cybersecurity processes and controls used in the development of GenAI.
Moreover, organizations anticipate increased costs associated with implementing GenAI in cybersecurity tools but believe that these costs will be offset by the savings derived from enhanced cybersecurity capabilities. However, quantifying these costs poses a challenge, especially for larger organizations with complex IT infrastructures.
To navigate the risks associated with AI in cybersecurity, organizations are advised to adopt a thoughtful approach, asking vendors about their AI development processes, applying business rigor to AI investment decisions, and viewing AI through a human-first lens. By understanding the potential risks and benefits of AI in cybersecurity, organizations can effectively integrate AI into their cyber defense strategies while mitigating associated challenges.
The survey conducted by Sophos provides valuable insights into the adoption, expectations, and risk awareness related to AI in cybersecurity, offering organizations a roadmap to leverage AI securely and enhance their cybersecurity capabilities in an increasingly digital landscape.