Skip to content

Posts tagged ‘#GenAI’

Feb 10

Top 6 cybersecurity trends from Gartner’s 2026 Security Forecast

Over 57% of employees are using personal GenAI accounts for work. A third of them admit to uploading sensitive data into tools their security teams haven’t approved. Meanwhile, agentic AI is proliferating through no-code platforms and vibe coding, creating attack surfaces most CISOs can’t see, let alone govern. And quantum computing? No longer a 10-year planning horizon. It’s a 2030 action deadline.

Gartner’s Top Trends in Cybersecurity for 2026 report, released February 5, 2026, identifies six forces reshaping how CISOs must operate. These cut across governance, AI adoption, identity, workforce, and cryptographic strategy simultaneously. None of them is incremental.

The trends report lands alongside Gartner’s updated Forecast: Information Security, Worldwide, 2023–2029, 4Q25 (G00843183, December 18, 2025) and the Forecast Analysis: Information Security, Worldwide, 2026 (G00838442, February 5, 2026), which together project global information security spending reaching $244.2 billion in 2026, up 13.3% in current U.S. dollars. I’ve tracked this forecast through multiple quarterly updates. The trajectory keeps steepening. The six trends below explain where that money is going and why.

“Cybersecurity leaders are navigating uncharted territory this year as these forces converge, testing the limits of their teams in an environment defined by constant change,” said Alex Michaels, Director Analyst at Gartner. “This demands new approaches to cyber risk management, resilience, and resource allocation.”

The spending backdrop: $244 billion and accelerating

Before getting into the six trends, context matters. Gartner’s 4Q25 forecast shows the three major security segments all growing at double-digit constant currency rates in 2026:

Source: Gartner Forecast: Information Security, Worldwide, 2023–2029, 4Q25 Update (G00843183). Constant currency rates.

Cloud security remains the fastest-growing subsegment at 28.8% growth in 2026. Nothing else comes close. The combined cloud security market (cloud security posture management, cloud access security brokers, and cloud workload protection platforms) is projected to reach $32.4 billion by 2029, with a 25% CAGR in constant currency. I’ve been watching this subsegment accelerate for three quarters straight. CSPM alone is growing at a 31.30% CAGR.

 

Cloud security spending reaches $32.4 billion by 2029. CSPM leads at 31.30% CAGR. Source: Gartner 4Q25 Forecast. (Please click on the image to expand for easier reading)

Trend 1: Agentic AI demands cybersecurity oversight

This is the trend that touches everything else on this list. Employees and developers are deploying AI agents through no-code/low-code platforms and “vibe coding” at a pace that outstrips security governance. Unmanaged AI agent proliferation. Unsecured code. Compliance violations that most security teams don’t even have visibility into yet. That’s the picture Gartner is painting.

Gartner’s recommendation is blunt: cybersecurity leaders must identify both sanctioned and unsanctioned AI agents operating within their environments, enforce access controls and data guardrails, and develop incident response playbooks specific to agent-driven threats.

“While AI agents and automation tools are becoming increasingly accessible and practical for organizations to adopt, strategic cybersecurity planning for these technologies is essential,” said Michaels. Cybersecurity leaders must work cross-functionally to manage agentic AI adoption, identifying sanctioned and unsanctioned AI agents, enforcing data access controls, and developing incident response playbooks.

The spending data backs this up. Gartner’s 4Q25 forecast projects the AI-amplified security market reaching $160 billion by 2029, up from $49 billion in 2025. Gartner is clear that this isn’t additive spending. It represents the portion of existing security products that now embed AI capabilities. But the expectation tells the story: over 75% of enterprises will use AI-amplified cybersecurity products by 2028, up from less than 25% in 2025. Vendors that don’t embed AI will lose shelf space. (For more on AI security platforms, see Gartner’s Top Strategic Technology Trends for 2026, which predicts that over 50% of enterprises will use AI security platforms to protect their AI investments by 2028.)

Trend 2: Global regulatory volatility drives cyber resilience efforts

Regulators are getting personal. Boards and executives now face direct liability for compliance failures. Not just organizational fines, but individual accountability. The penalties for inaction have moved from theoretical to career-ending. Across multiple jurisdictions simultaneously.

Gartner advises cybersecurity leaders to formalize collaboration across legal, business, and procurement teams to establish clear accountability for cyber risk. Align control frameworks to recognized standards. Address data sovereignty concerns before they become enforcement actions. The organizations doing this well are treating regulatory preparedness as a core security function, not an annual compliance checkbox.

This is where the spending data gets interesting. Gartner’s forecast shows security consulting services growing from $24.2 billion (2024) to $36.6 billion (2029), adding $12.4 billion in five years. Security professional services follow a similar trajectory: $27.3 billion to $40.8 billion, adding $13.5 billion. Organizations are buying outside expertise because they can’t build regulatory competence fast enough in-house. I’ve been covering these numbers for three quarters, and the services growth is the part of the forecast that keeps surprising me.

Infrastructure protection adds $26.4 billion between 2024 and 2029, the largest absolute growth of any subsegment. Source: Gartner 4Q25 Forecast. (Please click on the image to expand for easier reading)

Trend 3: Post-quantum computing moves into action plans

Gartner predicts advances in quantum computing will render the asymmetric cryptography that organizations rely on unsafe by 2030. Four years. That’s the window to adopt post-quantum cryptography alternatives before “harvest now, decrypt later” attacks start cashing in on data that adversaries are collecting today.

Organizations need to identify their cryptographic deployments, assess data sensitivity and lifespan, and prioritize cryptographic agility. That last phrase keeps coming up in my conversations with CISOs. The ability to swap encryption methods without re-architecting entire systems. Swapping an algorithm is one thing. Doing it across a production environment without downtime is an entirely different problem.

“Post-quantum cryptography is reshaping cybersecurity strategies by prompting organizations to identify, manage, and replace traditional encryption methods, while prioritizing cryptographic agility,” said Michaels. “By investing in these capabilities and prioritizing migration now, assets will be secured when quantum threats become a reality.“

The encryption market in Gartner’s 4Q25 forecast grows from $1.04 billion in 2023 to $2.04 billion by 2029 at an 11.95% CAGR. A 2.0x increase. For what has historically been one of the slower-growing security subsegments, that’s a significant acceleration. Quantum urgency is changing the math.

Trend 4: Identity and access management adapts to AI agents

AI agents are breaking traditional IAM models. Plain and simple. Identity registration and governance, credential automation, and policy-driven authorization weren’t designed for autonomous machine actors that can initiate actions, access data, and interact with systems without human intervention. The scale problem compounds fast: when every employee can deploy dozens of AI agents, the identity surface area explodes.

Gartner recommends a targeted, risk-based approach. Invest where gaps and risks are greatest. Leverage automation where possible. The practical starting point is understanding which AI agents carry the most privilege and the least oversight. Those are your highest-risk identities right now, and most organizations haven’t inventoried them.

The identity market is already significant. Gartner’s 4Q25 forecast shows identity access management growing from $18.7 billion (2024) to $29.0 billion (2029), adding $10.3 billion in five years. That’s before the full scale of agentic AI identity requirements hits the market. IAM vendors that solve machine-actor identity at scale will capture a disproportionate share of that $10.3 billion growth.

Trend 5: AI-driven SOC solutions destabilize operational norms

AI-enabled security operations centers are enhancing alert triage and investigation workflows. The technology works. But deploying AI into a SOC doesn’t automatically reduce headcount needs. It changes the skill mix. Analysts who excelled at manual triage need different capabilities to oversee AI-driven workflows. Organizations are discovering this the hard way. That’s an organizational transformation challenge, and throwing more technology at it doesn’t help.

“To realize the full potential of AI in security operations, cybersecurity leaders must prioritize people as much as technology,” said Michaels. “Strengthening workforce capabilities, implementing human-in-the-loop frameworks into AI-supported processes and aligning adoption with clear strategic objectives will be critical to maintaining resilience as SOCs evolve.”

The talent dimension makes this harder than it already sounds. ISC2’s 2024 Cybersecurity Workforce Study, published in October 2024, documented a global workforce gap of 4.8 million professionals, a 19% year-over-year increase. The active workforce flatlined at 5.5 million (up just 0.1%). The numbers are brutal: 25% of organizations reported cybersecurity layoffs in 2024. 37% faced budget cuts. 90% report skills shortages. 58% believe the shortage puts their organization at significant risk. On the spending side, managed security services are growing at 11.1% in 2026, the fastest rate in the services segment. Organizations can’t hire fast enough, so they’re buying managed SOC capacity instead.

Trend 6: GenAI breaks traditional cybersecurity awareness tactics

Existing security awareness programs are failing. Full stop. A Gartner survey of 175 employees conducted between May and November 2025 found that 57% use personal GenAI accounts for work purposes, while 33% admit to uploading sensitive information to tools their organizations haven’t sanctioned. Those numbers should alarm every CISO reading this. A third of your workforce is actively feeding proprietary data into tools you can’t audit.

Gartner recommends shifting from general awareness training to adaptive behavioral programs that include AI-specific tasks. Generic compliance videos won’t cut it here. The organizations getting this right are making approved GenAI tools easy to access and unsanctioned tools hard to justify. Trying to ban GenAI outright just drives usage underground and costs you talent.

Strengthening governance, embedding secure practices, and establishing clear policies for authorized GenAI use will reduce exposure to privacy breaches and intellectual property loss. The governance gap on GenAI usage is, in my view, the most underestimated risk on this entire list. Every other trend has a spending line item attached to it. This one requires behavioral change, which is harder to buy.

Total market trajectory: $173.5 billion to $323.5 billion

Gartner’s year-by-year spending trajectory shows the acceleration curve these six trends are riding:

Source: Gartner Forecast: Information Security, Worldwide, 2023–2029, 4Q25 Update (G00843183, December 18, 2025). Current U.S. dollars.

 

CSPM and CASB lead all security categories with 31% and 26% CAGR through 2029. Source: Gartner 4Q25 Forecast. (Please click on the image to expand for easier reading)

What this means for CISOs

Three of the six trends (agentic AI oversight, IAM for machine actors, and GenAI awareness) are fundamentally about the same problem: autonomous AI systems operating inside enterprise environments without adequate governance. The other three (regulatory volatility, post-quantum readiness, and AI-driven SOCs) are the structural forces those governance failures will collide with. That convergence is the signal about where 2026 budgets need to go.

The organizations that will navigate this environment successfully are doing three things simultaneously:

Mapping their AI agent footprint now. If you don’t know how many AI agents are operating across your environment, sanctioned and unsanctioned, you can’t govern what you can’t see. Gartner’s 75% AI-amplified product adoption projection by 2028 means this window for establishing control is narrow.

Building cryptographic agility into their architecture. The 2030 quantum deadline means migration planning starts in 2026, not 2028. The encryption market’s 2.0x growth reflects early movers. Late movers face rip-and-replace costs that compound every quarter they wait.

Investing in people alongside AI tooling. AI-enabled SOCs work when human operators have the skills to oversee them. The ISC2 data is unambiguous: a 4.8 million professional gap growing at 19% year-over-year. Managed security services growth at 11.1% tells you where CISOs are finding capacity.

Gartner’s numbers aren’t projections anymore. They’re procurement trends already hitting finance systems. The $244.2 billion flowing into information security this year will fund agentic AI governance, quantum migration, and SOC transformation, whether your organization participates or not.

Bottom line: CISOs planning for 2027 are watching their competitors buy the tools they’ll be scrambling for in 18 months. The data says move now.

Nov 3

Top 10 insights from Forrester’s 2026 Cybersecurity Budget Report

Top 10 Insights from Forrester’s 2026 Cybersecurity Budget Report

“With volatility now the norm, security and risk leaders need practical guidance on managing existing spending and new budgetary necessities,” states Forrester’s 2026 Budget Planning Guide.

The research firm’s planning guide for next year provides security leaders with new insights into how their clients are allocating budgets, which gives a helpful overview of the next 12 months of cybersecurity spending.

Implicit in the guide is the need for new technologies that enable organizations to be more adaptive to threats and take action on them before they become breaches. There’s also a strong focus on getting a head start on new technologies, anticipating the severity of threats new developments in AI, generative AI (genAI), deepfakes, and all other forms of weaponized technologies can pose to an organization.

Software is a solid 40% of cybersecurity spending, exceeding hardware at 15.8%, outsourcing at 15% and surpassing personnel costs at 29% by 11 percentage points. Meanwhile, security leaders face escalating threats, with generative AI attacks executing in milliseconds, a stark contrast to the average Mean Time to Identify (MTTI) of 181 days, according to IBM’s latest Cost of a Data Breach Report.

A fast-changing threatscape is changing spending priorities

Three converging threats are flipping cybersecurity on its head. What once protected organizations is now working against them. Generative AI (gen AI) is enabling attackers to craft 10,000 personalized phishing emails per minute using scraped LinkedIn profiles and corporate communications. NIST’s 2030 quantum deadline threatens retroactive decryption of $425 billion in currently protected data. Deepfake fraud that surged 3,000% in 2024 now bypasses biometric authentication in 97% of attempts, forcing security leaders to reimagine defensive architectures fundamentally.

Top ten insights from Forrester’s 2026 cybersecurity budget benchmarks

1.     Software now claims 40% of cybersecurity budgets, surpassing personnel spend. Forrester’s budget planning guide reports that software now accounts for approximately 40.2% of cybersecurity spending, eclipsing combined hardware and outsourcing budgets. It’s noteworthy that software spending is surpassing personnel costs by 11 percentage points.

Top 10 insights from Forrester’s 2026 Cybersecurity Budget Report
Source: Forrester Budget Planning Guide 2026: Security and Risk

2. Security budgets are accelerating, with 55% of global security and tech leaders forecasting significant increases next year. A robust 15% anticipate their budgets jumping more than 10%, and another 40% project hikes between 5% and 10%. Regional outlooks vary sharply: APAC is most bullish, with 22% expecting double-digit growth, compared to a cautious 9% in North America and just 12% in EMEA. However, nearly half (45%) remain reserved; 30% predict minimal budget bumps of 1%–4% or barely keeping pace with inflation, while another 10% expectSource: Forrester Budget Planning Guide 2026: Security and Risk no change, and 5% foresee cuts.

Top 10 insights from Forrester’s 2026 Cybersecurity Budget Report
Source: Forrester Budget Planning Guide 2026: Security and Risk

3. Cloud security, on-prem tech, and security awareness training are set to lead cybersecurity spending in 2026. Decision-makers are doubling down on cloud security, with 12% boosting budgets in this area by 10% or more, 11% doing the same for new on-premises solutions, and another 10% ramping up security awareness programs. Notably, investments in on-premises security technology appear twice among the top priorities, as 36% plan at least a 5% increase for both new deployments and upgrades to existing infrastructure. The numbers reflect an uneven global adoption of cloud strategies, driven by persistent concerns around cost, security, and data sovereignty. APAC is exceptionally bullish. 78% of companies there plan increased spending on new on-prem security, outpacing EMEA by 10% and North America by 8%.

Top 10 insights from Forrester’s 2026 Cybersecurity Budget Report
Source: Forrester Budget Planning Guide 2026: Security and Risk

4. Forrester recommends that security leaders broaden AI and ML security throughout the enterprise in 2026 as generative AI moves from standalone apps to essential business systems. Productivity suites, CRM platforms, and service tools now embed genAI natively, transforming workflows and widening potential attack surfaces. Enterprises urgently need comprehensive protection across AI models, data, applications, and user identities to counter risks such as model vulnerabilities, data leakage, and prompt jailbreaking. Hyperscalers like Google Cloud and Microsoft are responding quickly, while cybersecurity incumbents, notably Palo Alto Networks with its Protect AI acquisition, actively expand their footprint. Meanwhile, innovative startups, including Knostic and CalypsoAI, both featured at RSA’s Innovation Sandbox, target niche but critical genAI security gaps. Enterprises investing strategically now will securely scale genAI deployments and establish a clear competitive advantage.

5. Standalone SSE spending will sharply decline in 2026 as enterprises shift to unified SASE platforms, streamlining security operations and accelerating Zero Trust initiatives. Initially positioned to fill security gaps left by SD-WAN deployments and the surge in remote work, standalone SSE and isolated ZTNA solutions have now reached their functional limits. Leading companies increasingly adopt integrated platforms like Cato Networks’ cloud-native SASE, which consolidates SD-WAN, ZTNA, SWG, CASB, and firewall capabilities within a single, unified framework. As I’ve noted in VentureBeat, CISOs who pivot to unified SASE platforms benefit from simpler integration, superior AI-driven threat detection, and significant operational efficiencies that isolated solutions cannot deliver. Organizations proactively embracing integrated SASE from providers like Cato Networks will immediately enhance security resilience, improve operational agility, and significantly reduce vendor complexity.

6. Forrester predicts that by 2026, security leaders will seize a critical advantage by accelerating the adoption of post-quantum cryptography (PQC). With NIST’s landmark release of three core PQC standards in August 2024, organizations now have clear guidance to protect their data and applications against emerging quantum threats. Most governments align with NIST timelines, targeting legacy encryption deprecation by 2030, while Australia’s ASD urges adoption of approved PQC algorithms even sooner. Enterprises should immediately focus efforts on securing their most sensitive asymmetric cryptography, covering data at rest, data in transit, and data actively used within applications. Comprehensive cryptographic discovery and inventory tools provide the visibility required to assess readiness. Strategic partnerships with cryptoagility innovators, including Entrust, IBM, Keyfactor, Palo Alto Networks, QuSecure, SandboxAQ, and Thales, enable organizations to define a clear, secure migration path. Organizations acting decisively now will confidently navigate the quantum transition and fortify their competitive edge.

7. Machine identity management will become essential by 2026 as automated identities multiply rapidly across the IT infrastructure. Apps, AI agents, IoT devices, containers, cloud environments, and infrastructure scripts now generate identities faster than humans can manually track or manage. Enterprises urgently require solutions capable of managing these identities throughout their lifecycle, automating key rotations, and enforcing role-based access. Leading vendors, including Akeyless, BeyondTrust, CyberArk, Delinea, HashiCorp, Keyfactor, AppViewX, and emerging startups like Aembit, Astrix, Clutch, Entro, and Oasis Security, offer robust platforms to meet this challenge.

8. There will be a significant reallocation away from standalone interactive application security testing (IAST) in 2026, as operational hurdles continue to limit adoption. Originally designed to blend the runtime accuracy of dynamic application security testing (DAST) with static application security testing’s (SAST) code-level insights, standalone IAST has proven overly complex. Forrester recommends shifting budgets toward integrated IAST and DAST platforms, such as those from Invicti and HCLSoftware, that simplify deployment. Alternatively, APIs, microservices, and containers provide more transparent and consistent returns.

9. Consolidation of endpoint security and SIEM tools will accelerate in 2026. As extended detection and response (XDR) platforms gain momentum, security leaders have a clear opportunity to reduce agent sprawl, improve analyst efficiency, and lower the total cost of ownership. Vendors, including Microsoft, CrowdStrike, and Palo Alto Networks, now embed critical SIEM functions such as detection, correlation, third-party data ingestion (particularly from cloud, identity, and email), and response directly within their XDR offerings. While these integrated solutions currently don’t fully match standalone security analytics platforms, they deliver compelling advantages: simplified deployments, centralized threat context, and measurable operational savings. Organizations consolidating around unified XDR solutions today will streamline security operations and achieve faster, higher-quality threat detection.

10. By 2026, rapidly evolving generative AI will make deepfakes virtually indistinguishable from authentic media, rendering simplistic identity checks obsolete. Enterprises must proactively deploy sophisticated detection platforms using advanced ensemble modeling—spectral analysis, image artifacts, skin tone consistency, lighting anomalies, audio echo patterns, and device reputation, to ensure trusted employee verification and transaction authentication. Vendors such as GetReal Security, Sensity, and Reality Defender already offer real-time risk scoring, transparent reasoning, and integrated case management. Early adopters will safeguard identity security, sustain customer trust, and remain resilient against future deepfake threats.

Oct 29

Gartner: 60% of CISOs are piloting GenAI, but only 20% see results

Made with Imagen

The global threatscape is becoming dominated by all forms of weaponized LLMs, AI, and conversational agents, all aimed at launching lethal attacks that cripple companies and entire supply chains in minutes.

Nation‑state actors and organized eCrime groups now use artificial intelligence, including generative AI (GenAI), to automate reconnaissance, weaponize access, and strike faster than most defenses can respond. To keep pace, enterprises and the CISOs leading them are turning to GenAI as a defensive multiplier.

 CISOs are remaining optimistic

Gartner’s latest research quantifies that adoption is accelerating, but measurable results remain elusive. Approximately 60 % of organizations are piloting or planning GenAI cybersecurity initiatives. Only 20% of security leaders say these programs have delivered beneficial outcomes so far. These figures are from the research firm’s recent research note, What GenAI Use Cases Are Organizations Pursuing Within Cybersecurity? published earlier this month. Forrester predicts that the first agentic AI breach will happen in 2026.

Yet, despite early hurdles, cybersecurity leaders remain optimistic. Nearly every CISO I’ve spoken with sees GenAI as pivotal for transforming threat detection, proactive hunting, rapid incident response, and extracting actionable insights from terabytes of telemetry data streaming from endpoints and events. They recognize GenAI as crucial to decoding adversary tradecraft, particularly as identity-based threats and weaponized machine-learning attacks accelerate, reshaping the global threatscape in real time.

Key takeaways

  • Code Analysis leads the pack. GenAI‑assisted code analysis is the most mature use case: 22% of enterprises use it today, and another 30% are piloting it. It addresses a persistent gap, as 69% of software‑engineering leaders cite insecure code remediation as a critical skills bottleneck.
  • GenAI shows potential in helping SOC teams spot vulnerabilities faster. Currently, 21% of organizations actively leverage GenAI to enhance vulnerability detection and remediation, with another 26% piloting these capabilities. Adoption is driven by GenAI’s ability to automate vulnerability identification and prioritize remediation workflows, addressing longstanding security bottlenecks and resource constraints. Despite intense interest, widespread implementation remains challenged by integration complexity and skepticism about AI-generated accuracy, emphasizing the need for incremental deployment aligned with existing cybersecurity metrics.
  • CISOs Shift from Ambition to Execution Gartner finds that the leaders gaining traction are those adopting “bite‑sized” implementations or use cases that fit into current processes, deliver quantifiable ROI, and build trust among analysts and engineers.

CISOs are dealing with a threatscape moving at machine speed

Given how lethal machine-driven attacks are becoming, exacerbated by the growing sophistication of weaponized AI, going on the offensive with GenAI is a choice more CISOs are considering.

  • Nearly every cybersecurity team wants to have a Gen AI pilot either complete or in process to see how it integrates with their planned arsenal for 2026. Most CISOs want some form of AI in their arsenals going into the new year, as many expect the intensity, ingenuity, and lethal impact of automated attacks will reach new levels next year. One told me confidentially she fully expects machine-on-machine breach attempts to grow six times over in 2026 as her financial services firm handles highly speculative assets, including cryptocurrency ETFs and investment products.
  • Breakout speed hits critical mass. CrowdStrike’s 2025 Global Threat Report reveals the alarming acceleration of attacks: the fastest observed eCrime intrusion took just 51 seconds to escalate from initial access to lateral movement, virtually eliminating defenders’ window to respond.
  • Living-off-the-Land tactics dominate and often evade legacy cyberdefense systems: Malware-free intrusions surged significantly, now comprising 81% of interactive attacks in 2025. This trend is corroborated by findings from Mandiant and IBM X-Force, indicating adversaries are bypassing traditional signature-based controls by exploiting legitimate tools native to the enterprise environment.
  • Nation-state activity reaching new record levels as weaponized tradecraft gains stealth and sophistication: CrowdStrike, Mandiant have documented triple-digit increases in operations linked to China, Iran, and North Korea. These attacks predominantly target telecommunications and critical infrastructure, reflecting geopolitical tensions and nation-states’ strategic prioritization of cyber-espionage.
  • Global threat consensus is clear and compelling: ENISA’s Threat Landscape 2025 report aligns precisely with intelligence from CrowdStrike, Mandiant, and IBM X-Force, verifying that nation-state actors now leverage AI-driven automation to execute attacks faster than enterprises can detect, let alone defend.

CrowdStrike Founder and CEO George Kurtz underscored the urgency clearly in a recent CNBC interview on October 23rd, stating, “Well, this is something that we’ve really been focused on for the last number of years is being able to protect agentic AI. And if you think about agentic AI, it has the capabilities to interact with data. It has the capabilities to interact with Compute. It has identities, non-human identities, but it operates at superhuman speed. So all of the challenges that we’ve seen over the many years of humans getting themselves into trouble is only going to be exasperated by agentic AI, and we need security like CrowdStrike is delivering to protect it”.

Practical guidance from CISOs adding GenAI to their arsenals

Gartner’s latest research, combined with interviews and discussions with CISOs, security leaders, and SOC leaders who are piloting and in some cases using GenAI-based platforms today, offers this advice:

  • Go deep on integration on pilots to see how strong the GenAI solution is as a contributor to your security tech stack: CISOs and SOC leaders tell me that this is the most reliable test of whether a GenAI platform or app will make the cut and get to production on their tech stack. Solid APIs that have been battle-tested by vendors who have a strong API management history have the inside track.
  • Outcome-driven use cases are a must-have:At its core, cybersecurity is a business decision. And in a digital-first world, protecting your brand is essential. Any Gen AI pilot needs to contribute to a use case that makes a solid contribution to solidifying a business’s ability to compete.
  • Start with time-tested, established metrics: Getting to a level of trust in GenAI is core to seeing if it is ready to progress from pilot into production. Evaluating GenAI effectiveness using established KPIs, including mean time to detect (MTTD) and mean time to respond (MTTR), at table stakes. CISOs and others running pilots caution about creating entirely new metrics just for GenAI. It obfuscates the total business impact of the technology.
  • Parallel human trust and governance: Gartner emphasizes investing in employee enablement and robust governance frameworks like NIST’s AI Risk Management Framework to foster confidence in GenAI adoption. Human oversight remains a vital layer of control. Human-in-the-middle is essential for any workflow.

Bottom Line

Nation-state adversaries measure their innovation in how lethal their attacks are, how stealth their tradecraft is, and how easily they can evade legacy security techniques. It’s a full cyberwar just a few steps away from a full-on kinetic war. Research from CrowdStrike, IBM, Mandiant, and many other companies shows machine-to-machine attacks orchestrated with Gen AI are accelerating, so much so that Forrester predicts an imminent AI breach next year. GenAI’s ability to identify new threats and stop them makes the technology work a look.

Oct 19

Gartner’s 13 ways GenAI is improving B2B Sales is the roadmap every business needs

Gartner's 13 ways GenAI is improving B2B Sales is the roadmap every business needs

Generative AI (GenAI) ‘s potential for streamlining the most time-consuming processes in B2B sales is just getting started. As businesses increasingly rely on AI to enhance efficiency, automate routine tasks, and personalize customer engagement, GenAI is set to become a critical differentiator in the race for B2B sales and market leadership.

  • B2B sales organizations using GenAI-embedded sales technologies will reduce the time they spend prospecting and preparing for customer meetings by over 50% within two years.
  • Conversational interfaces based on GenAI will gain momentum and further revolutionize B2B selling. In 2028, they will be the driving force behind up to 60% of B2B sales interactions, up from less than 5% in 2023.
  • Centralized GenAI operations teams are also on the way, championed by Chief Revenue Officers (CROs). These teams will focus on integrating AI-driven strategies into sales and revenue operations. 35% of CROs will have GenAI operations teams online and incorporated into their companies’ strategic planning process by 2025.

The goal: find the most likely wins for GenAI in B2B Sales

Gartner’s recent report, 13 Generative AI Use Cases for B2B Sales, provides an analysis of where GenAI is helping improve B2B sales now and in the future.

“Generative artificial intelligence (GenAI) is reshaping the sales technology landscape, offering innovative solutions in areas such as prospecting, sales analytics, forecasting, and sales enablement. Tools infused with GenAI capabilities are embedded in use cases across the sales function, supporting key priorities such as revenue growth, GTM, cost optimization, and risk mitigation,” write the authors of Gartner’s study.

In defining and ranking the most valuable use cases of GenAI in B2B sales, Gartner examined where the technology is being most effectively applied to improve sales operations, increase seller productivity, and fuel future transformation.

The following multidimensional grid defines the use cases by value and feasibility.

Source: Generative AI Use Cases for B2B Sales, Gartner, Inc.

Gartner evaluated each use case for GenAI in B2B sales by scoring them on two key factors: business value and feasibility. The figure below shows the breakout of value and feasibility factors Gartner has used as a framework to rank the 13 use cases: “While we’ve defined the dimensions of value and feasibility according to our research criteria, companies are encouraged to customize these parameters to align with their own business needs,” the report states.

Source: Gartner, Inc. (2024) Generative AI Use Cases for B2B Sales

Mapping GenAI Use Cases Across Business Functions

Gartner also provides a GenAI use-case pipeline as part of their analysis to graphically explain how the 13 AI-driven strategies or use cases are distributed across business functions, including marketing, sales, and customer success.

The goal is to help organizations identify and take action on the use cases that will deliver the most significant potential impact. Gartner advises that use cases that span multiple stages of the pipeline typically deliver greater overall business value, making them strategic targets for investment. Additionally, the pipeline acts as a guide to identifying the relevant stakeholders within the organization, enabling more focused discussions and alignment on AI implementation priorities.

Source: Gartner, Generative AI Use Cases for B2B Sales.

GenAI is redefining the future of B2B Sales

Within the next three years, GenAI will emerge as one of the main factors that differentiate the most efficient and financially successful B2B sales organizations. With CROs creating operations teams to scale AI improvements across every phase of the sales process and sales teams using AI to automate reporting and manually-intensive tasks, GenAI is supposed to revamp the time-consuming work that gets in the way of selling.

Gartner’s analysis highlights that AI-driven strategies will soon dominate, with significant gains in efficiency and customer engagement. The message is clear: for sales organizations looking to stay ahead, embracing GenAI is not optional—it’s essential. Those who act now will position themselves as leaders in the evolving world of B2B sales, while those who hesitate risk being left behind.

 

Sep 17

Top Seven Takeaways from Gartner’s 2024 CIO GenAI Survey

Top Seven Takeaways from Gartner's 2024 CIO GenAI Survey

For 87% of CIOs, generative AI (GenAI) represents more than a technological advancement—it’s a career-defining opportunity.

Gartner’s 2024 CIO Generative AI Survey finds that GenAI is gaining momentum with CIOs, with 95% believing in the technology’s significant potential to improve their organizations. A significant obstacle: a gap between CIOs and their C-suite peers — tempers their optimism.

While CIOs recognize AI’s potential to unleash productivity gains and improve customer experiences, only a fraction of the C-suite sees it as an urgent priority. Closing that gap underscores CIOs’ essential role in championing GenAI by committing to excel at learning every aspect of the new technology and how it can deliver long-term value to their organizations.

The top seven takeaways from Gartner’s survey provide CIOs with a roadmap on how to take a practical, pragmatic approach to bridge the gaps across the C-suite and help their organizations get results from their GenAI strategies.

Strategic Insights from Gartner’s 2024 CIO GenAI Survey

Gartner’s latest CIO survey on GenAI provides insights into how IT leaders can capitalize on the technology’s significant impact, from career growth and expertise development to helping CIOs achieve more support across the C-suite. Each takeaway focuses on how CIOs can leverage AI to drive success for themselves and their organizations.

Here are the survey’s seven most insightful takeaways:

  • More CIOs are starting to view GenAI as a career-enhancing opportunity. Eighty-seven percent of CIOs see GenAI as a pivotal career advancement opportunity, with 44% of those proficient in AI strongly affirming this view. GenAI’s rapid adoption in organizations is proving itself a technology capable of delivering productivity gains and is increasingly becoming a skill and expertise essential for career advancement. For CIOs leading AI initiatives, it’s not just about technology—it’s about positioning themselves as visionary leaders qualified to step into more senior positions. To maximize this opportunity, CIOs need to prioritize the development of AI strategies that demonstrate clear, measurable business outcomes. Continuous learning and certification programs are given to any IT professional, especially CIOs, who want to maintain a competitive edge and have their careers capitalize on GenAI’s growth trajectory.

Source: Key findings from the 2024 Gartner CIO generative AI survey (ID G00820936). Gartner, Inc.

  • CIOs are more focused than ever on increasing their acumen about GenAI. CIOs are rapidly becoming the in-house experts on AI, with 52% now rating themselves as proficient or advanced, up from 38% nine months ago. This growing expertise is crucial, as 67% of CIOs are tasked with leading AI initiatives, often sharing this responsibility with other C-suite members. Gartner recommends that CIOs deepen their AI knowledge further and foster a culture of AI literacy across their teams to capitalize on this trend. Providing targeted training for IT and business leaders to ensure that AI strategies are fully integrated into broader business goals is quickly becoming table stakes.

Source: Key findings from the 2024 Gartner CIO generative AI survey (ID G00820936). Gartner, Inc.

  • Disconnect between CIO optimism and C-suite prioritization. Despite 95% of CIOs believing in the potential for GenAI to deliver value, the survey reveals a disconnect with the C-suite—only 21% of CIOs who consider themselves highly knowledgeable about AI believe their C-suite sees it as a high priority. This gap suggests a need for more effective communication and strategic alignment. CIOs need to focus on translating AI’s potential into language that resonates with the C-suite. Regular briefings and ROI-focused presentations can help bridge this gap and elevate AI as a top priority for all executive leaders.

Source: Key findings from the 2024 Gartner CIO generative AI survey (ID G00820936). Gartner, Inc.

  • CIOs are leading the charge in AI implementations. CIOs are increasingly in charge of GenAI initiatives, with 48% of CIOs responding to the survey indicating that they are the main executives responsible for these initiatives. Another 28% are part of the team responsible for developing AI strategy. This central role places CIOs at the forefront of digital transformation, requiring them to be strategic leaders and hands-on practitioners. CIOs need to establish clear governance frameworks and metrics for AI initiatives to ensure success and alignment with broader organizational goals. Additionally, partnering with other C-suite members, such as the CFO and CMO, can help secure the necessary resources and support for AI projects.


Source: Key findings from the 2024 Gartner CIO generative AI survey (ID G00820936). Gartner, Inc.

  • Focus on productivity gains. GenAI is proving effective in streamlining operations and improving efficiencies organization-wide, with 74% of CIOs citing productivity as its top business value. AI also improves customer experience (49%) and helps streamline digital transformation (31%). These priorities demonstrate AI’s multifaceted role in modern businesses. Gartner recommends that CIOs integrate AI into crucial or core organizational areas, ensuring that AI initiatives align with organizational objectives and are designed to deliver measurable, scalable outcomes.


Source: Key findings from the 2024 Gartner CIO generative AI survey (ID G00820936). Gartner, Inc.

  • Concerns over AI hallucinations. Although GenAI holds great potential, there are significant risks. According to 59% of CIOs, the biggest worry is “hallucinations” or misleading or incorrect outputs. In close succession, 44% and 48% of CIOs express concern about privacy violations and false information spread by malicious attackers. These dangers highlight the importance of solid governance, ongoing oversight, and continued investments in cybersecurity. According to Gartner, CIOs need to prioritize creating AI ethics guidelines and investing in auditing tools. Gartner also notes that reducing these risks will require cultivating a culture of accountability and transparency.


Source: Key findings from the 2024 Gartner CIO generative AI survey (ID G00820936). Gartner, Inc.

  • C-Suite engagement in AI is growing but still lags. The survey shows that while C-suite engagement with AI is growing, 42% of CIOs note increased investment in understanding AI, and 53% still consider their peers novices, highlighting a critical need for further education and alignment. CIOs need to take the lead and champion targeted AI education and strategy sessions to close this gap, ensuring AI initiatives are fully supported and integrated into the organization’s strategic goals.

Conclusion

In Gartner’s 2024 CIO Generative AI Survey, GenAI is more than a technological advancement—it’s a strategic imperative for CIOs seeking business transformation and career advancement. GenAI is rapidly becoming a cornerstone of modern enterprise strategy, with 87% of CIOs seeing it as a career-enhancing tool and 95% as a business value driver.

With only 21% of CIOs seeing AI as a high priority for their executive peers, the journey is difficult. 74% of CIOs are focused on productivity gains, but the C-suite is cautious. CIOs must gain AI expertise and lead the way in aligning AI initiatives with organizational goals to mitigate risks like AI hallucinations through robust governance. CIOs can use GenAI to achieve business success and career growth by strategically navigating these dynamics to cement their role as digital visionaries.

Bibliography:

Struckman, C. (2024). Key findings from the 2024 Gartner CIO generative AI survey (ID G00820936). Gartner, Inc. https://www.gartner.com/document/820936  (Client access required).

Sep 15

Capgemini report finds top 10 ways enterprises are harnessing the value of GenAI

Capgemini report finds top 10 ways enterprises are harnessing the value of GenAI

 

Eighty percent of enterprises have increased their investment in GenAI over the past year, with nearly one-quarter (24%) now integrating the technology into their operations, up from just 6% in the previous year.

Capgemini Research Institute’s recent report, Harnessing the value of generative AI: 2nd edition: Top use cases across sectors, highlights enterprises’ accelerating pace of GenAI adoption and growing importance across their operations and industries.

“Generative AI is not just a technological innovation; it’s a catalyst for transformative change across multiple sectors, driving productivity gains, operational efficiency, and strategic shifts in business models,” write the report’s authors. Enterprise leaders’ sentiment underscores the increasing recognition of GenAI as a critical technology for staying competitive in an increasingly turbulent economic environment.

According to the report, GenAI’s rapid adoption across IT and marketing indicates that companies are actively integrating it into their core operations to drive tangible, measurable benefits. Capgemini’s findings highlight the need for a strong data governance framework, strategic talent development, and vigilant cybersecurity to maximize GenAI’s potential as companies scale their initiatives.

How enterprises are maximizing GenAI’s value

Capgemini found ten key ways enterprises are positioning themselves to maximize GenAI’s potential. These strategies demonstrate how all companies can potentially invest in and integrate GenAI to boost growth, efficiency, and innovation across departments and industries.

Investment surge reflects growing confidence in GenAI. 89% of large businesses with annual revenues over $20 billion are leading this investment surge, highlighting GenAI’s significance for future growth. Additionally, 73% of companies with revenues between $1 billion and $5 billion have significantly increased their GenAI budgets, showing that this trend is not limited to the largest companies. This investment trend indicates that many companies believe GenAI can drive enterprise evolution and deliver substantial returns, with many expecting double-digit productivity and customer engagement growth.

Capgemini report finds top 10 ways enterprises are harnessing the value of GenAI

GenAI maturity grows steadily across industries. GenAI implementations have continued to mature across industry sectors over the past year. Up from 6% in 2023, 18% of organizations will fully integrate GenAI into most or all functions in 2024. With 64% and 53% of companies enabling GenAI, high-tech and financial services lead. Retail grew 17%–40% and industrial manufacturing 14%–35%. With 53% and 47% of telecom and energy/utilities adopting GenAI, respectively, progress has been made.

Capgemini report finds top 10 ways enterprises are harnessing the value of GenAI

GenAI’s integration across organizational functions is growing. In one year, GenAI IT adoption rose from 4% to 27% across organizational functions. GenAI is improving enterprise productivity and innovation through this broad integration across sales, marketing, operations, and R&D. Capgemini also found that GenAI is transforming operations and creating value across all business areas.

Capgemini report finds top 10 ways enterprises are harnessing the value of GenAI

Productivity and customer engagement gains. Over the last year, organizations that have implemented GenAI have reported a 7.8% increase in productivity and a 6.7% increase in customer engagement. These tangible benefits demonstrate GenAI’s ability to provide real, measurable value to enterprises. Early adopters report significant improvements in key performance metrics, highlighting the strategic importance of incorporating GenAI into business operations.

Capgemini report finds top 10 ways enterprises are harnessing the value of GenAI

Small Language Models (SLM) are gaining momentum. 24% of organizations have implemented SLMs, and 56% plan to do so within three years. These models are cheaper and less computationally intensive than larger AI models, so many companies are piloting and eventually moving them into production. SLMs excel in industry-specific applications, allowing businesses to harness AI’s potential without the infrastructure and resource demands of larger models. SLMs are becoming a good option for companies trying to compete in an AI-driven market as they seek efficient and scalable AI solutions.

Capgemini report finds top 10 ways enterprises are harnessing the value of GenAI

GenAI is enabling enterprises to advance from chatbots to autonomous multi-agent systems. GenAI is helping 62% of organizations upgrade from chatbots to AI agents that autonomously manage complex goals. 48% of users use multi-agent systems, where AI agents operate independently in changing environments. As businesses automate and optimize complex processes with these systems, decision-making and operational efficiency improve across industries. AI has evolved from simple user interactions to complex, agentic use cases, as shown in the image.

Capgemini report finds top 10 ways enterprises are harnessing the value of GenAI

GenAI agents are accelerating the shift to autonomous operations. GenAI agents are increasingly used in enterprise automation, with 82% of companies planning to implement them in 1–3 years. These agents are evolving from supportive tools to autonomous entities that can perform complex tasks without interaction. This shift is significant, with 71% of organizations expecting AI agents to automate workflows and 64% expecting customer service and productivity improvements. AI agents are not just efficient; they are a radical shift toward fully autonomous, AI-driven operations that will transform enterprise productivity and strategic decision-making.

Capgemini report finds top 10 ways enterprises are harnessing the value of GenAI

GenAI is forcing major business strategy shifts. 54% of companies expect GenAI to improve their strategies, up from 39% in 2023. 40% of companies are revising their business models to stay competitive as GenAI becomes more important. As GenAI becomes more important, 74% of businesses believe they must use it to grow revenue and stay ahead of the competition.

Capgemini report finds top 10 ways enterprises are harnessing the value of GenAI

Strengthening data foundations is crucial for GenAI’s success. More than 60% of companies realize GenAI’s potential depends on solid data foundations. Only 51% have documented data integration processes and 46% have AI data management policies. Even enterprises that have adopted GenAI still struggle to make the most of all their external data sources. Capgemini makes it clear that for GenAI initiatives to succeed, companies need scalable, secure data infrastructure.

Tighten AI controls or risk trust and compliance. Ethics in AI deployment is a priority for 57% of organizations, which recognize the need for control mechanisms that can flex and adapt as their business goals change. While 46% have clear AI governance frameworks, 73% agree that human oversight is necessary to validate AI-driven decisions. Without strong governance, bias, and accountability issues could counteract GenAI’s benefits, so organizations must act now.

Conclusion

With 80% of organizations increasing their investment and almost a quarter already including it in their operations, GenAI is fast changing how businesses run. This general acceptance emphasizes GenAI’s importance as a main engine of efficiency and creativity, providing real advantages in customer interaction and output.

Organizations are not only embracing GenAI as AI agents and Small Language Models (SLMs) acquire traction; they are also including GenAI in their basic strategies. Those who match GenAI with their business models, make investments in solid data foundations, and develop the knowledge required to maximize its possibilities will inherit the future. They will lead in the era of artificial intelligence by doing this, establishing new benchmarks for operational excellence and creativity.

Mar 24

BCG Shares Their Insights On What Sets GenAI’s Top Performers Apart

BCG Shares Their Insights On What Sets GenAI's Top Performers Apart

image created in DALL-E

The top 10% of enterprises have one or more GenAI applications in production at scale across their organizations. 44% of these top-performing organizations are realizing significant value from scaled predictive AI cases. 70% of top performers explicitly tailor their GenAI projects to create measurable value.

Boston Consulting Group (BCG) estimates that an organization with $20 billion in revenue can achieve gains of $500 million to $1 billion in profit using GenAI, with nearly a third of those gains coming in the first 18 months. Their recent analysis of what sets GenAI’s top performers apart, What GenAI’s Top Performers Do Differently, looks at the factors that most differentiate enterprises excelling with GenAI today.

What further differentiates these top performers from others is how they’re looking to use GenAI to redefine the functional areas of their organizations. They’re far more likely to have a solid foundation in predictive AI and four times more likely to increase their investment in AI and digital-first strategies and technologies.

Half of the enterprise leaders BCG interviewed say their organizations are testing GenAI in pilot projects today but have not achieved full-scale implementation. The remaining 40% haven’t taken any action on GenAI yet.

BCG Shares Their Insights On What Sets GenAI's Top Performers Apart

Source: Boston Consulting Group, What GenAI’s Top Performers Do Differently.

What Sets The Top 10% Apart

Two-thirds of GenAI’s top-performing enterprises aren’t digital natives like Amazon or Google but instead leaders in biopharma, energy, and insurance. BCG found that a U.S.-based energy company launched a GenAI-driven conversational platform to assist frontline technicians, increasing productivity by 7%. A biopharma company is reimagining its R&D function with GenAI and reducing drug discovery timelines by 25%.

Top GenAI performers have their greatest lead over peers across five main capabilities. These capabilities include having a clear link to business performance, modern technology infrastructure, strong data capabilities, leadership support, and a grounding in responsible AI. The steep curves shown in the graphic below suggest how these five most differentiated capabilities are essential for successful GenAI adoption at scale.

BCG Shares Their Insights On What Sets GenAI's Top Performers Apart

Source: Boston Consulting Group, What GenAI’s Top Performers Do Differently.

Key takeaways from BCG’s analysis of GenAI top performers 

Top performers excel at creating strong links between GenAI initiatives and business value. Seven in ten enterprises who are high achievers know how to build a business case for their GenAI projects and pilots. They’re focused on measuring results and quantifying value. BCG found that in a typical GenAI portfolio, 60% of the initiatives are focused on reducing costs and 40% on increasing revenue.

An all-in mindset when it comes to maintaining and growing a modern technology infrastructure. GenAI top-performing enterprises are three times more likely to already have a modular, modern IT tech stack and supporting infrastructure in place. They’re focused on being prepared to develop new, GenAI-powered services on their current and future AI models while supporting DevOps. BCG says top performers are 1.5 times more likely to focus on building the GenAI stack internally over the coming three years, underscoring their desire to make the technology a core capability for the organizations.

Are pursuing and advanced data strategy that includes unstructured data. GenAI top performers are two times more likely to have data pipelines and data management practices in place to streamline data sourcing and storage. They’re also more likely to have unstructured data expertise. BCG observes that an advanced data strategy “is a critical element of GenAI, given that models are only as strong as the data on which they’re trained.”  Organizations have found success with less mature skills in these areas, although it may take longer as they need to address infrastructure and data strategy gaps or shortcomings.

Strong leadership support for innovation, including the willingness to champion GenAI. Senior executives’ support and prioritizing an innovative culture are the most differentiating factors in defining GenAI’s high performers. Gen AI high performers who are scaling use cases are three times more likely than no-action companies to have leaders who prioritize innovation and actively support GenAI. BCG notes that these leaders often have a deep understanding of the technology’s potential impact on their industry, and they are publicly committed to ensuring that the organization capitalizes on it in new ways that generate value. “Visible support and commitment from our leadership team has been crucial, as it provided the freedom to experiment and deal with failures along the way,” said the head of data and analytics at a global media company referenced in BCG’s report.

Have responsible AI guidelines, guardrails and processes in place. Top-performing enterprises are more likely to have responsible AI frameworks, guidelines, and guardrails in place. BCG observes that a common trait top-performing enterprises have is ensuring their AI systems and workflows put humans in the loop and use only factual data. “Our research shows that leading companies are far more likely to have developed guardrails, guidelines, and policies to ensure that they follow the principles of responsible AI. In the findings, the share of scaling companies that are cautious about the potential misuse of GenAI and taking proactive measures to address these risks is 20 percentage points higher than the share of companies taking no action in this area,” write BCG’s researchers.