Gartner, Inc. has emphasized the urgency of addressing significant cybersecurity trends anticipated for the year 2025, with insights from senior analyst Alex Michaels guiding organizations through shifts primarily driven by advancements like generative AI.
According to Gartner's findings, security and risk management (SRM) is expected to navigate through diverse challenges and opportunities. "Security and risk management is facing varied challenges and opportunities with the aim of transitioning and fostering resilience within organizations," stated Michaels, who highlighted the importance of adapting to the growing complexity of digital environments.
One of the primary trends underscored is the influence of Generative AI on data security programs. Traditionally, organizational focus has been on protecting structured data assets, such as databases. "Many organizations are refocusing investment strategies to protect unstructured data more," Michaels explained. This shift necessitates leaders to rethink their communication and security strategies as unstructured formats like text, images, and videos increasingly come under scrutiny.
Another key trend described by Gartner is the management of machine identities, which have surged due to the reliance on Generative AI, cloud services, and automatic processes. Michaels revealed alarming statistics, noting, "Out of 335 IAM leaders surveyed, only 44% had teams responsible for Machine Identities across their organizations." The risk of mishandling these identities stands as yet another vulnerability organizations need to address, prompting SRM leaders to introduce stronger Identity and Access Management (IAM) frameworks.
This focus on specific technological integrations continues with the discussion of Tactical AI, which SRM leaders are now expected to deploy tactically to redefine project priorities. "Currently, SRM leaders have clear responsibilities to secure AI use by third parties as well as to protect their organization’s AI applications," Michaels added. The prioritization of measurable outcomes through this usage is anticipated to mitigate risks and showcase the genuine value of AI investments.
Gartner also found through surveys of large organizations conducted between August and October 2024, showing they utilize, on average, 45 different cybersecurity tools. With over 3,000 vendors competing, the importance of optimizing these tools becomes apparent. Michaels urged leaders to build cooperation between purchasing and engineering teams to establish comprehensive cybersecurity programs effectively.
Extending the value of security behavior and culture programs (SBCPs) stands as the next expected trend. Organizations incorporating GenAI within these frameworks are predicted to experience significant reductions in employee-driven security incidents. Gartner estimates, "By 2569, organizations employing integrated SBCPs utilizing GenAI may see incidents decrease by 40%." These findings highlight not only the shifting value of human behavior on cybersecurity practices but also the potential for symbiotic relationships between technology and improved workplace culture.
Lastly, Michaels pointed out the rising concern surrounding burnout among cybersecurity professionals. "Burnout among security executives and teams needs acknowledgment and urgent solutions," he stated as this prevalent issue poses risks to the effectiveness of cybersecurity programs. The relentless pressure of securing sophisticated infrastructures amid constant threats has been wearing down these teams, and leaders are tasked with developing effective support structures to bolster their workforce's well-being.
With the continuous evolution of cybersecurity landscapes fueled by innovation and changing workforce dynamics, organizations must adapt swiftly and efficiently. Gartner's forecast for 2025 not only highlights these necessary changes but also emphasizes the strategic importance of implementing them to safeguard digital environments effectively. Successfully addressing these new challenges will determine organizational success and resilience for the future.
