According to Gartner, a business and technology insights company, by 2028, 50% of all enterprise cybersecurity incident response efforts will focus on incidents related to custom-built, AI-driven applications.
“AI is rapidly evolving, but many tools, especially custom-built AI applications, are deployed before they are fully tested,” he said. Christopher Mixter, Vice President Analyst, Gartner. “These systems are complex and dynamic, making them difficult to secure over time. Most security teams still lack clear processes for handling AI-related incidents, which means resolving issues can take longer and require much more effort.”
Gartner recommends that security leaders get involved early in custom-built AI application projects to ensure sufficient time, plan resources, and manage expectations for appropriate security controls.
This is one of Gartner’s key cybersecurity predictions, and Gartner recommends that cybersecurity leaders factor into their security strategies for the next two years, along with the following predictions:
By 2028, more than 50% of enterprises will use an AI security platform to secure the use of third-party AI services and protect custom-built AI applications.
AI security platforms provide organizations with an integrated way to manage the new risks associated with rapid adoption of AI, including rapid deployment and data misuse. By centralizing visibility and control, these platforms help CISOs enforce usage policies, monitor AI activity, and enforce consistent security guardrails across third-party and custom AI applications. Security leaders should evaluate their AI security platforms to ensure they can protect both forms of applications.
By 2027, manual AI compliance processes will expose 75% of regulated organizations to fines exceeding 5% of global revenue.
Despite different approaches to regulation around the world, AI regulation is converging on a universal demand for a systematic risk management approach. Even if CISOs have been able to stay ahead of regulations and standards for security, privacy, and cyber risk management, new regulations covering AI safety call everything into question. For greater success, Gartner recommends establishing cyber governance risk and compliance and achieving compliance through technology.
By 2030, 33% of IT operations will be spent on remediating AI data debt to protect AI.
Most organizations’ data is not AI-enabled, and insecure and unstructured data is a major barrier to AI adoption. In response, cybersecurity leaders are extending data loss prevention to monitor and restrict data flows triggered by GenAI and agent AI data access events and requests. Gartner recommends working with data and analytics and AI leaders to define a structured program of data discovery, assessment, and access control remediation.
By 2027, 30% of organizations will require comprehensive sovereignty over cloud security management to cope with ongoing geopolitical turmoil.
Geopolitical turmoil and local regulations are creating intolerable data risks, requiring many organizations to make sovereignty a key part of their cyber resilience approach. This will require changes and prioritization efforts in vendor selection of cloud tethering products as regional patration requirements tighten. Cybersecurity leaders must take an active role in defining their organization’s sovereign requirements, including those required by local regulations.
By 2028, 70% of CISOs will use identity visibility and intelligence capabilities to reduce their IAM attack surface and reduce the risk of credential compromise.
Identity has become a prime target of attack as organizations struggle to manage the rapid growth and complexity of human and machine identities. This leaves visibility gaps with isolated identity and access management (IAM) tools and increases the risk of misconfigurations. Gartner recommends addressing these blind spots by integrating an integrated AI-powered identity visibility and intelligence platform to improve detection and remediation.
Gartner is the global authority on AI
Gartner is an essential partner for executives and technology providers deploying AI strategies to achieve mission-critical priorities. The independence and objectivity of Gartner insights enables clients to make informed decisions and realize the full potential of AI. C-level clients use Gartner’s proprietary Ask Gartner AI tool to decide how to leverage AI in their businesses. Gartner is the global authority on AI, with over 2,500 business and technology experts, 6,000 documented insights, and over 1,000 AI use cases and case studies.
