Skip to main contentSkip to footer
Skip to content 
- Leveraging advanced technologies like Generative AI and outcome-driven metrics is crucial for improving cybersecurity strategies and boardroom confidence.
- Emphasizing a human-centric approach, including security behavior programs and identity-first security, enhances organizational resilience and reduces risks.
Generative AI (GenAI), unsecure employee behavior, third-party risks, continuous threat exposure, boardroom communication gaps and identity-first approaches to security are the driving forces behind the top cybersecurity trends for 2024, according to Cybersecurity Experts at Fortray.
GenAI, a significant force in the cybersecurity landscape, is occupying a considerable portion of security leaders’ attention. It presents both a challenge to manage and an opportunity to harness its capabilities to enhance security at an operational level. As Mazhar Minhas, CEO of Fortray, points out, despite GenAI’s inescapable force, leaders must not overlook other external factors outside their control this year.
Security leaders will respond to the combined impact of these forces by adopting a range of practices, technical capabilities, and structural reforms within their security programs in 2024 to improve organizational resilience and the cybersecurity function’s performance.
Six Leading Trends
The following six trends will have a broad impact across these areas:
Trend 1: Generative AI – Short-term Skepticism, Longer-Term Hope
Security leaders need to brace themselves for the rapid evolution of GenAI. The emergence of large language model (LLM) applications like ChatGPT and Gemini is just the beginning of its disruptive journey. Amidst the promises of productivity increases, skills gap reductions, and other new benefits for cybersecurity, Experts advise using GenAI through proactive collaboration with business stakeholders to lay the foundations for its ethical, safe, and secure use.
It’s important to recognize that this is only the beginning of GenAI’s evolution, with many of the demos we’ve seen in security operations and application security showing real promise. There’s solid long-term hope for the technology, but we’re more likely to experience prompt fatigue than two-digit productivity growth. Things will improve, so encourage experiments and manage expectations, especially outside the security team.
