Cybersecurity teams are being left out of creating the next generation of AI tools

News
By
published

Nearly half of companies excluded cybersecurity teams from AI discussions

Manager is verifying the validity, security, approving requests, quality assurance, investment contracts. Online digital document work, paperless office. online survey. Checking mark up on check boxes
(Image credit: Shutterstock / LALAKA)

Despite AI tools now being implemented in organizations of all sizes, cybersecurity professionals have reproted they are being excluded from the development process.

Despite the increasing use of AI in security operations, a new survey from ISACA has revealed almost half (45%) of companies shut out cybersecurity teams from the development, onboarding, and implementation of AI solutions.

The threat landscape is rapidly developing, as are the tools security professionals use to combat them, with the survey showing 28% of cybersecurity teams are now using AI to automate threat detection and response, and 27% use the tech for endpoint security.

Shifting focuses

AI has the potential to be used by cybersecurity teams to streamline tasks and lighten workloads, but there’s also evidence AI tools are being increasingly used in cyberattacks against businesses.

With more and more regulations also being introduced regarding AI software, like Europe’s AI Act, governance is becoming much more significant. Shockingly, only 35% of cybersecurity professionals are actively involved in the development of policy governing the use of AI tech within their business.

“Cybersecurity leaders cannot singularly focus on AI’s role in security operations," said Jon Brandt, ISACA Director, Professional Practices and Innovation.

"It is imperative that the security function be involved in the development, onboarding and implementation of any AI solution within their enterprise – include existing products that later receive AI capabilities.”

Staffing difficulties are a persisting problem in the cybersecurity industry, and the survey reveals that there has been an increase in the use of contractors and consultants to plug the gap.

There is an increased reliance on AI or automation to address shortages - making it even more important for security professionals to be included in implementation stages.

More from TechRadar Pro

Ellen Jennings-Trace
Ellen Jennings-Trace
Staff Writer

Ellen has been writing for almost four years, with a focus on post-COVID policy whilst studying for BA Politics and International Relations at the University of Cardiff, followed by an MA in Political Communication. Before joining TechRadar Pro as a Junior Writer, she worked for Future Publishing’s MVC content team, working with merchants and retailers to upload content.