CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Gartner forecasts AI-related incidents to dominate enterprise IR workloads by 2028

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Gartner predicts that by 2028, at least 50% of enterprise incident response efforts will focus on resolving security issues stemming from custom-built AI applications, driven by their rapid deployment without adequate testing and security controls. Security teams currently lack defined processes for handling AI-related incidents, leading to prolonged resolution times and elevated operational overhead. To mitigate risks, Gartner advises integrating security teams early in AI development lifecycles to enforce controls, a strategy termed "shifting left". Concurrently, AI-powered security tools are expected to become critical, with 50% of organizations adopting such platforms within two years to protect third-party AI services and custom-built applications against threats like prompt injection and data misuse.

Timeline

  1. 18.03.2026 11:40 1 articles · 2h ago

    AI-related incident response workloads projected to exceed 50% by 2028

    Incident response efforts are forecast to dedicate at least half of operational capacity to resolving security issues in custom-built AI applications by 2028, reflecting their rapid deployment without adequate security controls. Gartner highlights the complexity of securing these systems and the lack of established incident response processes as key factors driving this trend. Organizations are advised to adopt "shifting left" strategies to integrate security teams early in AI development lifecycles.

    Show sources
    Open in new tab

Information Snippets

  • By 2028, at least 50% of enterprise incident response efforts will be dedicated to addressing security incidents linked to custom-built AI applications due to their complex, dynamic nature and insufficient pre-deployment testing.

    First reported: 18.03.2026 11:40
    1 source, 1 article
    Show sources

  • Gartner advises security teams to integrate into AI development processes early to implement controls, a practice referred to as "shifting left."

    First reported: 18.03.2026 11:40
    1 source, 1 article
    Show sources

  • By 2028, 50% of organizations are projected to adopt AI-powered security platforms to monitor, enforce acceptable use policies, and apply consistent guardrails across AI applications and third-party AI services.

    First reported: 18.03.2026 11:40
    1 source, 1 article
    Show sources

  • Gartner anticipates a surge in AI-powered "identity visibility and intelligence platforms" to improve detection and remediation of risks posed by human and machine identities, particularly over-permissioned AI agents.

    First reported: 18.03.2026 11:40
    1 source, 1 article
    Show sources

  • By 2027, nearly 30% of organizations will require comprehensive sovereignty over cloud security controls to address geopolitical risks, with CISOs expected to define sovereignty requirements.

    First reported: 18.03.2026 11:40
    1 source, 1 article
    Show sources

  • A 2025 survey by Arqit revealed that 62% of organizations cite data sovereignty and privacy risks as major barriers to AI projects in public cloud environments.

    First reported: 18.03.2026 11:40
    1 source, 1 article
    Show sources

  • The survey also found that only 8% of organizations can rely on sovereign edge environments today, and 16% cannot guarantee sovereign facilities at all, highlighting significant gaps in sovereign infrastructure adoption.

    First reported: 18.03.2026 11:40
    1 source, 1 article
    Show sources