AI to run half of responses
Researchers predict AI will handle over half of enterprise incident responses by 2028, shifting detection and initial triage to automated systems while leaving complex decisions to humans. That trend promises faster alerting but raises the need for human review and oversight of AI‑driven actions. (it‑online.co.za)
The announcement was made at Gartner’s Security & Risk Management Summit in Sydney on March 16–17, 2026. (gartner.com) Gartner flagged "custom‑built AI‑driven applications" as the specific source of the emerging incidents and quoted VP Analyst Christopher Mixter saying many of those tools are being deployed before they’re fully tested. (it-online.co.za) Gartner forecasts that multiagent AI use in threat detection and incident response will climb from about 5% of AI implementations today to roughly 70% by 2028, explicitly framing the shift as augmentation rather than outright replacement of staff. (msspalert.com) Gartner’s Top Strategic Technology Trends for 2026 places AI Security Platforms and multiagent systems among the highest‑urgency investments, recommending unified platforms to secure both third‑party and custom AI deployments. (pointguardai.com) Gartner’s broader forecasts also predict a spending pivot toward preemptive security, with preemptive cybersecurity solutions expected to account for about 50% of IT security spending by 2030, up from under 5% in 2024. (morningstar.com) Gartner and reporting outlets have urged tighter AI‑agent governance and oversight to mitigate new attack surfaces created by autonomous agents, warning that inadequate controls will increase organizational risk. (tech.co) Gartner’s 2026 guidance pairs these operational predictions with shifts in leadership responsibilities, including forecasts that by 2028 more CISOs will be asked to own broader resilience functions such as disaster recovery alongside incident response. (bitsight.com)
