BSA urges governments to update cybersecurity policies for AI era

The Business Software Alliance (BSA) has called on governments to update cybersecurity policies as advanced artificial intelligence (AI) systems change how cyberattacks are carried out and how organisations defend against them.

In its 2027 Global Cyber Agenda for an AI World, released on October 23, the industry association outlined eight priority actions, including deploying AI for cyber defence, improving vulnerability management, modernising legacy systems and preparing for post-quantum cryptography.

The agenda recommends giving cybersecurity professionals priority access to advanced AI systems to help identify and address vulnerabilities. It also calls for updating systems that operate beyond their supported lifecycles and building resilience so organisations can continue operating during cyber incidents and recover quickly.

Focus on regulatory alignment and cyber resilience

BSA has called for greater alignment between cybersecurity regulations, arguing that fragmented and overlapping rules can divert resources from security efforts. Coordinated policies could help organisations focus on implementing protections while meeting compliance requirements.

The agenda also recommends preparing for the transition to post-quantum cryptography, designed to protect information against potential attacks from sufficiently capable quantum computers.

Another priority is measuring cybersecurity performance through operational indicators, including mean time to detect threats and mean time to respond to incidents. These metrics can help organisations assess how effectively they identify and manage security risks.

The recommendations retain established practices such as senior management oversight, public-private collaboration and internationally recognised standards, while calling for policies to reflect the changing role of AI in cybersecurity.

Venkatesh Krishnamoorthy, country manager for India at BSA, said international cooperation would be important as India expands AI adoption. He also highlighted the need to align cybersecurity rules with global approaches and prepare critical systems for the post-quantum era.

The agenda is directed at policymakers in India and globally, with recommendations focused on strengthening cyber defence, updating infrastructure and regulations, and improving organisations’ ability to detect, respond to and recover from attacks.