
Technical note · Consulting firm
Cybersecurity trends: Looking over the horizon
Cybersecurity is a never-ending race whose pace is accelerating: McKinsey proposes looking ahead.
- Organization
- McKinsey & Company, Risk & Resilience Practice
- Document date
- 10 March 2022
- Type
- Technical note
- Language
- English
- Scope
- International
- Length
- 7 pages
- Authorship
- Jim Boehm, Dennis Dias, Charlie Lewis, Kathleen Li and Daniel Wallance
What it contains
The article, from March 2022, argues that companies are layering more systems into their networks to support remote work, improve the customer experience and generate value, which creates new vulnerabilities, while adversaries, who are no longer individual actors but sophisticated organizations, use artificial intelligence and machine learning. No organization is immune and even the most sophisticated controls will become obsolete, so leadership must ask whether it is prepared for the accelerated digitization of the next three to five years.
It examines three trends: on-demand access to ubiquitous data and information platforms, which raises the likelihood of a breach; the use of AI, machine learning and other technologies to launch increasingly sophisticated attacks, with examples such as the Emotet malware and the rise in ransomware and phishing during the first wave of COVID-19; and a growing regulatory landscape together with gaps in resources, knowledge and talent that will outpace cybersecurity.
For each trend it proposes responses: for the first, zero-trust capabilities, behavioral analytics, elastic log monitoring and homomorphic encryption; for the second, a risk-based approach to automating detection and response; and for the third, embedding security in technology capabilities from the design stage. It also recommends refreshing the cyberstrategy roadmap and adopting a formal program of continuous review against shifts in trends.
Why it matters for risk management
It offers a simple framework for reviewing the cybersecurity strategy with a long-term view. It is a 2022 article; its trends remain valid, but it is worth complementing it with more recent publications, such as the FSI’s 2026 study on frontier AI.
Summary prepared by the Dominican Republic Risk Management Club from a reading of the original document, with the source verified on 7 October 2026. It does not replace reading the official text and is not advice.
Connect with our networks