... The AI risk landscape is changing faster than most insurance policies. As carriers rethink coverage for AI-driven incidents, CIOs need to understand not only how they govern AI but also where costly gaps in protection may be hiding. Insights at a Glance Strategic Planning Assumption Issue Impact More Det ...
Analyst(s): Paul Furtado
Get more from Gartner
Interested in receiving proven business and technology insights, analyst guidance, benchmarks, diagnostics and more? Connect with a Gartner representative to learn more about becoming a Gartner client.
... Microsoft AST adoption remains limited as members seek security awareness capabilities that extend beyond phishing simulation. Eighteen members of Gartner Research Board’s Global CISO community share perspectives on Microsoft AST adoption, evolving security awareness and human risk management progra ...
... Create tailored cyber GRC technology RFPs and evaluate vendor capabilities using a structured functional assessment template. This toolkit helps cybersecurity leaders create comprehensive RFPs, compare proposals consistently, identify capability gaps and support more informed technology decisions. When ...
Analyst(s): Pedro Pablo Perea de Duenas | Lampis Alevizos | Deepti Gopal
... properly assess and tier third parties. Use this tool to run quick criticality assessments that tier third parties to prioritize and manage third-party cyber risk activities across the life cycle. When to Use Directions for Use Gartner Recommended Reading Gartner Insights Abstract ...
... As AI-driven bot traffic grows more sophisticated, organizations must elevate AI bot risk to a top 2026 security priority, with clear CISO ownership, board-level visibility, and adaptive defenses that separate legitimate users from malicious automation. Insights at a Glance Issue Context Impact Brief Im ...
... This compilation of notable cyber incidents is both an awareness and educational tool to augment C-level executives’ knowledge of recent cyber-focused disruptions. This collection is not exhaustive of all threats and breaches and should complement continuous InfoSec learning from diverse sources. Gartner ...
... the rapid adoption of AI-enabled technologies. Strengthening Cyber GRC capabilities is essential to manage this complexity and maintain resilience. This research offers practical guidance to structure, upskill, and staff an effective Cyber GRC function. Insights at a Glance Impact Actions How to Execute ...
Analyst(s): Lisa Neubauer | Pedro Pablo Perea de Duenas | Niyati Daftary | Victoria Cason
... Gartner First Takes Fresh insights on emerging trends Evidence emerged yesterday of the first AI-driven cyberattack on a wide range of government entities, including a water utility. Though it eventually failed, it is a warning to all CISOs to focus on foundational security controls instead of focusin ...
Analyst(s): Eric Grenier | Katell Thielemann | Meghan Hollis
... Organizations often lack clear cyber-risk appetite statements, causing unclear risk tolerance expectations and inconsistent handling of cyber risk. Cybersecurity leaders must use this toolkit to assess risk preferences and draft actionable cyber-risk appetite statements that inform decision making. ...