Primera página del documento: Cybersecurity trends: Looking over the horizon

Technical note · Consulting firm

Cybersecurity trends: Looking over the horizon

Cybersecurity is a never-ending race whose pace is accelerating: McKinsey proposes looking ahead.

Organization
McKinsey & Company, Risk & Resilience Practice
Document date
10 March 2022
Type
Technical note
Language
English
Scope
International
Length
7 pages
Authorship
Jim Boehm, Dennis Dias, Charlie Lewis, Kathleen Li and Daniel Wallance

What it contains

The article, from March 2022, argues that companies are layering more systems into their networks to support remote work, improve the customer experience and generate value, which creates new vulnerabilities, while adversaries, who are no longer individual actors but sophisticated organizations, use artificial intelligence and machine learning. No organization is immune and even the most sophisticated controls will become obsolete, so leadership must ask whether it is prepared for the accelerated digitization of the next three to five years.

It examines three trends: on-demand access to ubiquitous data and information platforms, which raises the likelihood of a breach; the use of AI, machine learning and other technologies to launch increasingly sophisticated attacks, with examples such as the Emotet malware and the rise in ransomware and phishing during the first wave of COVID-19; and a growing regulatory landscape together with gaps in resources, knowledge and talent that will outpace cybersecurity.

For each trend it proposes responses: for the first, zero-trust capabilities, behavioral analytics, elastic log monitoring and homomorphic encryption; for the second, a risk-based approach to automating detection and response; and for the third, embedding security in technology capabilities from the design stage. It also recommends refreshing the cyberstrategy roadmap and adopting a formal program of continuous review against shifts in trends.

Why it matters for risk management

It offers a simple framework for reviewing the cybersecurity strategy with a long-term view. It is a 2022 article; its trends remain valid, but it is worth complementing it with more recent publications, such as the FSI’s 2026 study on frontier AI.

Summary prepared by the Dominican Republic Risk Management Club from a reading of the original document, with the source verified on 7 October 2026. It does not replace reading the official text and is not advice.

See all publications

Looking for an event on a specific topic?

Tell us which topics you would like to see at our upcoming events.

Write to us
Club de Gestión de Riesgos de la República Dominicana

A non-profit association that promotes risk culture and best practices in the Dominican financial system.

Contact