AI Set to Manage Most Security Operations by 2028, Reports Predict

Analysts at IDC have released a pivotal report, titled 2026 FutureScape: Worldwide Security and Trust, forecasting that artificial intelligence (AI) will fundamentally transform security operations within three years. By 2028, AI agents are expected to triage approximately 80% of alerts in most Security Operations Centers (SOCs) globally, changing the landscape of cybersecurity.

The report highlights the advantages of AI, which provides speed, scalability, and predictive capabilities. These features enable organizations to detect, prevent, and respond to cyber threats more effectively than traditional methods. The growing reliance on AI is essential for keeping pace with increasingly sophisticated cyberattacks.

Key Predictions for the Future of Cybersecurity

IDC’s report outlines ten significant predictions that will shape the future of security and trust in organizations. Among these, the following points stand out:

– By 2027, 80% of organizations will encounter phishing attacks utilizing AI-generated synthetic identities, where criminals create fake identities that blend real information with AI-generated data.
– By 2028, 40% of enterprises will implement autonomous agent-powered cyber risk quantification platforms. These tools will convert security metrics into financial exposure, assisting in budget allocations and mergers and acquisitions risk assessments.
– By the first half of 2028, 30% of alerts in detection and response platforms will include real-time monetary estimates of the potential damage a threat may cause.

These predictions reflect a shift in the mindset of Chief Information Security Officers (CISOs), who are increasingly recognizing the potential benefits of AI. The report indicates that this digital transformation is not just a trend but a necessary evolution in response to modern cyber threats.

Regulatory Changes and Industry Adaptation

As AI becomes an integral part of cybersecurity, regulatory changes are expected to follow. By 2027, one in three governments will mandate sovereign AI solutions for sensitive sectors. This will compel enterprises to adopt architectures that comply with privacy and residency regulations, ensuring that sensitive data remains protected within national boundaries.

Moreover, by 2027, 60% of enterprises deploying AI agents will require an AI Bill of Materials (BoM) to support ongoing security vulnerability scanning and compliance management. This requirement will enhance the accountability and transparency of AI systems in use.

The cybersecurity market is on the brink of significant growth, driven by the adoption of next-generation AI-enabled technologies. As organizations prepare for a future dominated by AI, the emphasis on security metrics and financial implications will reshape how businesses approach their cybersecurity strategies.

In conclusion, the IDC report paints a comprehensive picture of a rapidly evolving cybersecurity landscape. With AI poised to take a central role in security operations, organizations must adapt to these changes and invest in the necessary technologies to safeguard their digital environments effectively.