Embracing AI in Cybersecurity: 6 Key Insights from CSA’s 2024 State of AI and Security Survey Report

Originally published by Abnormal Security.

The integration of artificial intelligence (AI) into cybersecurity practices is transforming the landscape, offering both promising advancements and new challenges. The State of AI and Security Survey Report, sponsored by the Cloud Security Alliance, provides a comprehensive look into how AI is being perceived and utilized in the field of cybersecurity. This survey sheds light on the current trends, benefits, and obstacles associated with AI integration, providing valuable insights for industry professionals. Here, we’ll explore some of the key findings from this report and examine their implications.

1. Security Professionals are Cautiously Optimistic About AI

A significant majority of security professionals (63%) believe in AI’s potential to enhance security measures, particularly in improving threat detection and response capabilities. However, there is a notable caution, as 25% of respondents expressed concerns about AI potentially being more advantageous to malicious actors. This dual perspective underscores the need for balanced strategies that maximize benefits, while also mitigating risks.

Cloud Security Alliance

2. AI is Viewed as an Empowerment Tool Rather Than a Replacement

The survey reveals that AI is seen more as a tool to empower security professionals rather than replace them. Most respondents (30%) foresee AI enhancing their skill sets and supporting their roles (28%), with only a small fraction fearing complete replacement. This finding is crucial for organizations planning AI implementations, highlighting the importance of using AI to augment human capabilities rather than substituting them.

Cloud Security Alliance

3. Differing Perspectives Exist Between C-Suite and Staff

There is a noticeable disconnect between executives and security staff members regarding their familiarity and understanding of AI. While 52% of C-level executives report being very familiar with the ways generative AI could be used across the company, only 11% of their employees feel the same. This gap suggests a need for better communication and education at all levels to ensure cohesive AI strategies—especially as new AI technologies are implemented across the organization.

Cloud Security Alliance

4. 2024 is the Year of AI Implementation

The survey indicates that 2024 is set to be a pivotal year for AI implementation in cybersecurity, with 55% of organizations planning to adopt generative AI solutions. Use cases for these technologies vary among organizations, with the most common being rule creation (21%), attack simulation (19%), and compliance violation detection (19%).

Cloud Security Alliance

5. Skill Gaps Present Major Hurdle to AI Implementation

Despite the excitement and eagerness to adopt AI, significant challenges remain. The most prominent issue is the skills gap and staff shortage, as noted by 33% of respondents. This field demands both specialized cybersecurity expertise and a continuous understanding of rapidly evolving AI technologies. Recruiting future staff with the necessary skills and enhancing the knowledge of current employees underscores the complexity of utilizing AI in cybersecurity. Interestingly, the ability to find viable use cases or feel confident in the effectiveness of AI was at the bottom of the list—showcasing that most feel that AI will be a powerful (and effective) tool once implemented.

Cloud Security Alliance

6. There is a Significant Need for AI Training and Governance

According to survey respondents, there is a strong emphasis on the need for training and governance to effectively integrate AI into security practices. A substantial 74% of organizations are planning to create teams dedicated to governing the secure use of AI, highlighting the proactive steps being taken to ensure ethical and effective AI deployment.

Cloud Security Alliance

Embracing the Future of AI and Cybersecurity

Perhaps to be expected, the 2024 State of AI and Security Survey Report paints a picture of a cybersecurity industry at a crossroads with AI. While there is optimism about the potential of AI to revolutionize security practices, it comes with a variety of challenges that need to be carefully managed—especially at a time when the impact of AI is just starting to become known. The future of cybersecurity is not just about adopting new technologies but adapting to them in ways that enhance human expertise and organizational resilience.

Innovative AI solutions have become crucial in this landscape, particularly in enhancing email security and employee engagement. These solutions not only streamline security processes but also enrich them—providing deeper insights and more effective threat intelligence so that security professionals can augment their work with the power of AI-native capabilities.

By embracing AI-powered security technologies, companies can bolster their defensive capabilities while cultivating a more knowledgeable and prepared workforce. This approach aligns with the survey's findings, which highlight the importance of upskilling security teams and enhancing their proficiency in handling sophisticated AI tools. While the impact of AI is still developing, it is clear that the world is moving toward an AI-powered future fairly quickly—and the results of the 2025 survey may be much different.