Summary Bullets:
• In a survey of 2,486 IT professionals conducted by the Cloud Security Alliance (CSA) and Google Cloud, 63% say AI will help them elevate threat detection and response.
• Most view AI as beneficial to their roles, rather than a replacement of personnel.
Artificial intelligence (AI) is central to many tech conversations. Cybersecurity is no different. Enterprises have been using machine learning (ML) to set a baseline of a normal operating environment and then to discern malicious activity from harmless anomalies. With the rise of generative AI (GenAI), there are more discussions on how to use the technology to improve threat intelligence, workflow, and incident response. At the same time, there is some nervousness about the integrity of AI output. There are also questions around the subject of bad actors using AI as an offensive weapon.
The CSA and Google Cloud surveyed 2,486 IT professionals to take the temperature about using AI in cybersecurity. Most – 63% – think AI will help them improve threat detection and mitigation. That said, there is a degree of caution and concern centered on AI technology falling into the wrong hands: 31% see AI as helping the enterprise and the cybercriminals looking to breach it equally, and 25% think that bad actors will get more benefits from AI than the organizations they attack.
Top AI concerns include data quality challenges – 38% – which could interfere with the accuracy of data output. Nearly one-third (30%) say they expect AI to enrich their cybersecurity skill set, and 28% look forward to AI providing additional support for their role. Another 24% see AI as a means to automate some of their job functions, but only 12% worry that AI will replace workers. Half are concerned about becoming overly dependent on AI, stressing the need to balance technology with human experience.
There is a lack of balance in AI knowledge in the workforce. While 52% of all C-level suite executives boasting deep familiarity with AI, only 11% of the general staff can make that statement. Most – 74% – trust their leadership to make constructive AI decisions.
Mandates around AI are definitely generated at the top: 82% confirm AI projects are generated at the executive level.
While it is still early days for AI development and there are many lessons still to be learned, the technology has a lot of potential to better inform security solutions and the IT staff who use them.
Does the perception of these survey respondents map to your own organization? Where do you see AI adding value in your organization’s cyber defense?