AI to Manage Majority of Security Operations by 2028, Reports Warn

Analysts at IDC have published a significant report outlining transformative predictions for cybersecurity. The 2026 FutureScape: Worldwide Security and Trust indicates that by 2028, artificial intelligence (AI) agents will handle triage for approximately 80% of alerts in security operations centers (SOCs) globally. This shift underscores the vital role AI is set to play in enhancing cybersecurity measures.

The report highlights that AI technology is increasingly becoming essential for organizations to effectively detect, prevent, and respond to cyber threats. With its speed, scalability, and predictive capabilities, AI outperforms traditional cybersecurity methods. As the landscape of cyberattacks evolves, businesses must adapt to these changes to remain secure.

AI’s Growing Role and Emerging Threats

According to the IDC report, the adoption of AI in security operations is just the beginning. By 2027, about 80% of organizations are expected to encounter phishing attacks executed with AI-generated synthetic identities. These threats will blend real information with AI-generated data, creating seemingly legitimate identities that pose significant risks.

The report also predicts that organizations will begin to quantify the financial impact of breaches in real-time. By the first half of 2028, around 30% of alerts generated in detection and response platforms will include an estimated monetary value of potential damages. This approach will provide businesses with clearer insights into the economic implications of security threats.

The findings have significant implications for Chief Information Security Officers (CISOs). They are increasingly recognizing the benefits of integrating AI into their security strategies. Some of the projections include:

– By 2028, 40% of enterprises will utilize AI-powered cyber risk quantification platforms to convert security metrics into financial exposure, helping to guide budgets and assess risks associated with mergers and acquisitions.
– By 2027, one in three governments will mandate the use of sovereign AI in sensitive sectors, compelling organizations to implement regulatory architectures that comply with privacy and residency requirements.

Future Security Strategies

As the cybersecurity market evolves, the report identifies key trends that signal a shift in how organizations approach security. For instance, by 2027, 60% of enterprises employing AI will require an AI Bill of Materials (BoM) to facilitate continuous security vulnerability scanning and ensure compliance.

By 2029, it is anticipated that 70% of large enterprises will adopt Private Cloud Compute (PCC) to enhance data privacy within cloud-based systems. This transition will shift AI applications from exploratory phases to large-scale implementations, highlighting a significant evolution in cybersecurity infrastructure.

The report also notes that by the first half of 2027, 85% of detection and response playbooks will be dynamically generated at the moment a SOC alert is triggered, further streamlining response efforts. Additionally, 15% of enterprise PC users are expected to have deep fake detection applications running locally by 2027, addressing the rising threat of synthetic identities.

The current findings from IDC indicate that the cybersecurity landscape is poised for a dual mode of growth. As CISOs and cyber-risk professionals embrace next-generation, AI-enabled security solutions, organizations will need to prepare for the inevitable changes and challenges that lie ahead.