#Japan #Cybersecurity #Tokyo #EY #AI Systems

Redefining Cyber Resilience in the AI Era

The latest global report from EY, titled "EY Global Cybersecurity Leadership Insights Study 2026," reveals startling insights into the state of corporate cybersecurity. Approximately 36% of corporate assets are found within what is termed the "Vulnerability Zone," where visibility and security measures are significantly lacking. This alarming statistic raises questions about the adequacy of current cybersecurity strategies in the evolving landscape shaped by artificial intelligence (AI).

In a survey involving 840 decision-makers and cybersecurity professionals across 128 countries and 17 sectors, the findings point to a critical issue: 70% of cybersecurity leaders acknowledge that the most significant risks often lie in blind spots. With the advent of generative AI and autonomous AI systems, attackers are increasingly capable of rapidly identifying and exploiting vulnerabilities. This means that previously effective approaches focusing solely on protecting important assets are now insufficient. Organizations must embrace a more comprehensive resilience framework that accounts for hidden risks and interdependencies throughout all levels.

The Prevalence of Vulnerability Zones

The survey unveiled that vulnerability zones were particularly pronounced in the following areas:

• - Operational Technology (OT) and Physical Assets: 57%
• - Third-party Ecosystems: 49%
• - AI Systems and Tools: 47%
• - Network Infrastructure: 38%

As digitalization and the integration of AI into corporate operations continue to intensify, these areas become critically important. However, the study highlights that visibility and security controls are lagging behind the rapid changes, leaving organizations exposed.

A Shift from Recovery to Continuous Monitoring

Resilience must now be redefined beyond merely recovering from incidents. Instead, it should focus on continuously monitoring and addressing the accumulation of vulnerabilities. Organizations must prepare to respond at a speed that matches the rapidly evolving threats they face. The proliferation of AI systems and autonomous agents means that managing not just human identity but also AI identities and connections with third parties is becoming an essential part of management strategy.

Characteristics of Secure Creators

Interestingly, the report identifies a group of companies termed "Secure Creators" that have effectively reduced their vulnerability zones. Upon analysis, it was revealed that these leaders maintain an average of only 30% of their assets within vulnerability zones, significantly lower than the 42% average for other companies. Three defining characteristics of these Secure Creators include:

1. Comprehensive Visibility: They visualize all organizational assets and interdependencies, not limiting their focus to critical resources but also including AI systems, physical assets, and third-party connections. This enables a more accurate assessment of potential risks.

2. Integration of Cybersecurity into Business Strategy: Secure Creators understand that cybersecurity is not just an IT issue but an enterprise-level resilience challenge. They align their cybersecurity strategies with broader business continuity and governance objectives, thus enhancing their adaptability to changing risks.

3. Proactive Improvement Mechanisms: These organizations continuously assess and adapt their visibility and security measures in response to technological advancements and emerging threats. Their preparedness to tackle new risks using AI is a striking advantage in this fast-paced landscape.

Conclusion

Maki Ogawa, Partner and Joint Leader of Technology Consulting Cybersecurity at EY, emphasizes that the survey has compelling implications for organizations in Japan as well. The evolution of Frontier AI brings forth complexities, enabling attackers to exploit previously overlooked vulnerabilities and forgotten assets. Therefore, organizations must take proactive steps to visualize these assets and the inherent vulnerabilities.

To dive deeper into the findings of this significant report, please refer to the detailed document on how Frontier AI is transforming cybersecurity and the imperative for redefining resilience.

About EY

EY aims to create new value for clients, its members, society, and the planet while establishing trust in capital markets to build a better working world. By leveraging data, AI, and advanced technologies, EY's teams assist clients in confidently shaping their futures and deriving solutions to pressing current and future challenges. EY operates in over 150 countries and regions, providing services across assurance, consulting, tax, strategy, and transactions.

All in to shape the future with confidence.

For more information about EY, visit ey.com.