Industry executives and experts share their predictions for 2024.  Read them in this 16th annual VMblog.com series exclusive.

Identity and Generative AI Impacts on Cybersecurity

By Mark Cassetta, Chief Product Officer at Axiomatics

2023 has included several cybersecurity breaches amongst notable big names, but has also unveiled a rise in innovations from the private sphere of startups through the public impact of Generative AI. All of this has led to meticulous insight and research regarding the landscape of identity management and cybersecurity – especially what pieces are most essential and which are most likely to protect against the security risks that continue to emerge. As 2023 comes to an end, it’s worth the time to look back on what has occurred recently to allow us to more clearly look into what 2024 has in store.

Convergence of Identity and Cybersecurity

While unquestionably many will look back at 2023 as the year of generative AI and ChatGPT, it is also worth taking note that both the identity management and cybersecurity industries have accelerated their convergence. In conferences that focus mainly on identity, several notable sessions included an expert in cybersecurity. Same with those that have for years focused on cybersecurity, several panels and sessions brought in the viewpoints of identity and access management experts.

What used to be conversations that picked a side or way of approaching overall data security, now is more of an open floor to incorporate identity and data management features into the wide realm of cybersecurity. Identity is taking center stage in discussions as enterprises gain clarity on the pieces and overall strategy needed to incorporate the goal of Zero Trust scaled to their reach and needs. Identity Access and Management (IAM) specific startups have gained notoriety and are paving the path for the new year, this points to big players recognizing the need for them and acting on opportunities to incorporate internally. 

Platform shifts and new markets in security

Although Generative AI seemingly took the world by storm in 2023, in many ways, most ideas and processes around AI are still in their pilot form. This means that once legislation truly forms around the security of Generative AI, more security companies that are focused on AI will appear within the market – following the historic rises of those involved in past innovation such as mobile (Mobile Device Management circa 2007-2012) and cloud sharing (Cloud Access Security Brokers circa 2012-2018). When those platform shifts were new and bursting with energy, every new startup was focusing on these platforms and the processes surrounding them.

Cybersecurity and AI are two fields that constantly are changing, meaning that in 2024 I do not think there is already a specific problem that companies are going to be racing to solve. Instead, the new year is going to rely on enterprises adhering to new legislation and threats while moving forward in providing integral pieces to the security marketplace. Continuing to rely on the human factor, not handing it all to AI, and recognizing the need for strategic synergy when it comes to products and investments is what is going to result in the enterprises emerging as successful in 2024.

History often repeats itself and this will be the case when Generative AI continues to grow outside of its pilot phases this next year. Current startups will decline as big names continue to swallow them up, while new types of startups will appear as legislation is finalized. I’m looking forward to seeing how the IAM and cybersecurity fields incorporate AI while continuing to be ahead of the risks popping up every single day.

##

ABOUT THE AUTHOR

A cybersecurity veteran with more than a decade of experience, Mark Cassetta leads Axiomatics’ product strategy, driving the creation of solutions that offer enterprises around the world a way to address current and future authorization and access management challenges. Mark’s background includes various leadership positions for both software vendors and global systems integrators, including Titus and Accenture.