U.S. Firms Adopting Zero Trust Cybersecurity Architecture for Resilience: Report

Zero trust architecture is gaining significant traction in the U.S. as companies seek to protect resources across ever-widening security perimeters, according to a report from ISG.

Cloud migration and distributed operations are making this approach more attractive, outlined a recent report by the global AI-centered technology research and advisory firm.

Zero trust systems deploy components such as identity and access management (IAM) to verify users and microsegmentation to isolate individual assets.

A wide range of advanced cybersecurity services and solutions are being adopted by U.S. firms to protect assets from increasingly sophisticated attacks, the 2025 ISG Provider Lens Cybersecurity — Services and Solutions report added.

U.S. organizations are partnering with service and solution providers to implement adaptive systems for enterprise resilience, including AI-enabled capabilities.

They are responding to growing and evolving threats, as demonstrated by the increasing frequency and impact of data breaches and ransomware attacks throughout 2024, the report stated.

“Security threats are more complex than ever, and regulations continue to expand and evolve,” said Doug Saylors, partner and leader of ISG Cybersecurity. “Companies in the U.S. want automated, proactive cybersecurity solutions closely integrated with their business strategies and objectives.”

Advanced analytics and automation make security operations more efficient and effective, while streamlining workflows by linking various tools, automating repetitive tasks, and codifying incident response processes.

AI innovations enhance these capabilities, offering new ways to interpret data, identify patterns, and make real-time recommendations, the report added. This trend is expected to continue through 2025.

AI is playing a greater role in U.S. cybersecurity strategies as both threat actors and solution providers rapidly adopt AI-enabled technologies, ISG stated.

IT professionals are increasingly concerned about attackers using AI to exploit vulnerabilities with malware more quickly and with greater effect.

The good news is that AI-powered defense systems can process massive amounts of data to identify threats that manual detection may not identify.

The increasing use of AI tools is driving up demand for solutions to protect AI models, training data, and applications from attacks such as data poisoning, the report added.

Strategic security means providers will focus on enhancing business resilience by using real-time intelligence to help enterprises devise strategies aligned with their risk profiles, ISG stated. Meanwhile, organizations are taking advantage of significant advancements in security operations center/managed detection and response (SOC/MDR) services, including improved proactive threat hunting and prioritization of threats.

“Successful enterprises in the U.S. are integrating people, processes, and technology into their security postures to meet AI-related risks,” said Gowtham Sampath, assistant director and principal analyst, ISG Provider Lens Research, and lead author of the report. “Partnering with service providers is crucial for augmenting internal teams with specialized skills and building up defenses.”

The report also explores global cybersecurity technology trends affecting U.S. enterprises, including increasing adoption of IAM, extended detection and response (XDR), and security service edge (SSE).

Source link

Leave a Comment