Over the past 18 months, AI has changed the way we do many things in our work and professional lives, from helping us write emails to how we approach cybersecurity. The Voice of SecOps 2024 A study found that AI was a major reason for the many changes in cybersecurity over the past 12 months. Interestingly, AI was the cause of both new and existing problems. is quickly becoming a common solution for these same challenges.
The study was conducted with Deep Instinct and Sapio Research by surveying 500 senior executives. cyber security Professionals working for U.S. companies with at least 1,000 employees. Respondents worked in a wide range of industries, including financial services, technology, manufacturing, retail, healthcare and critical infrastructure, and the public sector.
Change in prevention strategy thanks to AI
One of the key findings of the survey is that 75% of respondents have had to change their cybersecurity strategies in the past year due to the increase in AI-generated cyber threats. The vast majority of professionals (97%) said they are concerned that their organization will fall victim to AI-generated zero-day attacks.
The majority (73%) of professionals said the change involved a shift to a more proactive approach rather than a reactive one. Interestingly, more than half of respondents (53%) said the change in approach came from their leaders. At the time of the survey, 42% were already adopting a preventative approach by using predictive prevention platforms. 38% were considering using these platforms.
As part of the overall change in approach, many organizations are also providing security awareness and training programs (47%) and endpoint detection and response systems (41%). Other strategies include regular security audits (39%), collaborating with external experts (38%), and using other AI-based tools (20%).
Discover AI-powered cybersecurity solutions
AI increases stress and burnout among cybersecurity professionals
The survey also found that AI is increasing stress and burnout among cybersecurity professionals, already a major concern and challenge for the industry. When asked if their stress levels were higher this year than last, 66% said yes.
High stress levels among cybersecurity professionals can lead to lower retention rateswhich can negatively impact a company’s cybersecurity due to vacancies and lack of continuity.
Additionally, high stress can make recruiting more difficult because professionals leave the field or don’t want to work in a high-stress organization. Incident Response team, it usually takes six months on average before the replacement is a full member of the team, which also increases stress on existing team members.
However, when asked what was the reason for the increase in stress and burnout, 66% said AI was to blame. Other causes included staffing and resource limitations, compliance and regulatory pressures, public scrutiny and reputational concerns, and the challenges of working remotely. Additionally, 29% said they were stressed by the fear that AI could take over their jobs.
Businesses are turning to AI to reduce the stress it causes. About a third of companies plan to use AI tools to automate repetitive, time-consuming tasks to free up cybersecurity professionals to focus on high-level tasks to reduce stress. Additionally, 35% said that adopting a prevention-focused approach would help reduce their stress levels.
However, Reducing burnout requires Additional support. Organizations can help their teams learn to be more adaptable, for example by practicing how to deal with potential incidents, which can reduce stress through preparedness. Additionally, by building smaller teams, companies can create a culture of mutual trust. Companies should prioritize mental health by providing resources and normalizing the use of those resources, especially after a cyberattack.
AI continues to evolve
As AI technology continues to improve and advance, the cybersecurity industry will continue to be impacted and the way cybercriminals and cybersecurity professionals use their tools will evolve. By staying on top of new tactics and tools, cybersecurity professionals can take the most effective preventative approach while working to reduce stress.
