AI for cyber-security risk: harnessing AI for automatic generation of company-specific cybersecurity risk profiles

Purpose In the modern digital realm, artificial intelligence (AI) technologies create unprecedented opportunities and enhance tactical security operations. This study aims to address the gap in using AI to strategically produce holistic cybersecurity risk profiles. Design/methodology/approach This paper uses a rigorous AI-powered method to conduct cybersecurity risk profiles tailored to individual enterprises, investigating sources of threat and guiding defense strategies. This paper built a real working demo application based on real security databases and used it to build company-specific cybersecurity risk profiles. Findings This paper demonstrated a robust, automated process for developing tailored cybersecurity risk profiles in three case studies across different industries. The AI application produced coherent outputs, validated by experts as accurate. Research limitations/implications This study lays the groundwork for further research, allowing for refinement by integrating additional resources, such as near-real-time alerts from external or internal sources. Practical implications The escalating threat landscape highlights the need for organizations to adopt AI for cybersecurity management, leveraging tools that assist in defining and refining cybersecurity risk profiles to enhance defense measures. Social implications Using AI-generated cybersecurity risk profiles supports efforts to create a safer digital environment for organizations, their employees and their customers, aligning with the growing reliance on AI in daily life. Originality/value Unlike most papers, this paper uses an AI application to address contemporary challenges in creating holistic, non-tactical profiles that can be refined and contextualized by the organizations while achieving automation in key processes and integrating multiple resources.