Integrating Generative AI in Cybersecurity: A Sensemaking Perspective

This study explores the sensemaking processes of cybersecurity professionals as they engage with Generative Artificial Intelligence (GenAI), such as ChatGPT, within their operational environments. Recognizing the high-stakes and adversarial nature of cybersecurity work, we investigate how these professionals interpret and operationalize GenAI technologies, contributing to both cybersecurity practice and the development of GenAI tools. Utilizing a qualitative content analysis (QCA) of data from Reddit forums and YouTube panel discussions, we identify five distinct forms of sensemaking: operational, interactive, experiential, visionary, and cognitive. These forms, evoked in a cyclical process, follow the phases of change, enactment, selection, and retention. Our findings advance the understanding of professional sensemaking in the context of rapidly evolving technologies, offering a socio-technical perspective on the integration of GenAI in cybersecurity operations.