Adoption of new technologies can alter an organisation’s attack surface, requiring security controls, testing, and risk management to change.
Search across headline titles and summaries.
Background for this topic.
Adoption is the extent to which people and organizations begin using a security technology, control, policy, or practice and incorporate it into routine work. In cybersecurity, adoption is more than purchasing or deploying a capability: it includes correct configuration, user participation, and continued use. Examples include enabling multifactor authentication, applying security patches, using secure coding practices, and collecting logs from systems that require monitoring.
Adoption matters because uneven or incomplete use leaves exploitable gaps. A partially deployed authentication control may protect some accounts while others remain exposed; delayed patch adoption can leave known vulnerabilities available to attackers; and missing or poorly configured logging can limit detection and investigation. Practitioners therefore assess coverage, exceptions, configuration quality, and whether controls operate as intended. Training, usable workflows, staged rollout, and measured policy compliance can improve adoption without encouraging insecure workarounds or unnecessary collection of personal data.
Panelists Discuss Deepfake, Trust Frameworks, AI Skepticism, Venture Capital WoesFrom RSAC Conference 2025 in San Francisco, ISMG editors wrapped up coverage discussing the impact of U.S. government funding cutbacks, growing deepfake threats, trust challenges in AI adoption and venture capital pressures affecting the cybersecurity vendor market.
Accountability Is Key as Enterprises Adopt AI at Scale, Says Saviynt's Jim RouthAI governance must balance innovation with security, making it vital that organizations adopt flexible, consensus-driven approach to ensure responsible AI deployment while addressing risks such as data exposure and software resilience, said Jim Routh, chief trust officer at Saviynt.
Estonia's Cyber Diplomat Tanel Sepp Urges Trust-First AI StrategyEstonia's Ambassador at Large for Cyber Diplomacy Tanel Sepp emphasizes the need for global cooperation and trust in AI adoption in digital economies. He discusses Estonia's whole-of-society model, the importance of regional partnerships and why digital sovereignty still lacks clear definition.
DistributedApps.ai's Ken Huang on Agentic AI Risks and Threat ModelingAs AI agents gain autonomy and access dynamic tools, organizations must adopt new threat modeling approaches like mixture threat modeling, a new method that accounts for AI's unpredictability, said Ken Huang, chief AI officer at DistributedApps.ai.
Blackpoint Cyber's Manoj Srivastava on Orchestration, Context and Unified CybersecurityThe traditional notion of a fixed security perimeter has become obsolete, and the threat surface has expanded significantly due to remote work, cloud adoption, IoT devices and third-party vendor integrations, said Manoj Srivastava, chief technology and product officer at Blackpoint Cyber.
Capitol Meridian Partners' Razi on Smarter AI Use, Strong Leadership and DiversityMany AI models prioritize speed over security, exposing organizations to significant risks. Niloofar Razi, operating partner at Capitol Meridian Partners, stressed the need for companies to evaluate models carefully before adoption.