에이전트 기반 엔터프라이즈 보안 : 제1부 - AI 시대를 대비한 IDC의 사이버 보안 역량 평가 프레임워크 최신 정보

This IDC Perspective updates IDC's Cybersecurity Capabilities Assessment Framework for the era of agentic AI, emphasizing that while security fundamentals persist, control must shift to continuous, identity-driven governance. It details how agentic AI introduces new external, internal, and emergent risks, requiring recalibration across all security domains. The framework's maturity phases and domains are reexamined for agentic environments, and actionable recommendations are provided to help technology buyers adapt, prioritize identity-centric controls, and maintain resilience amid ongoing disruption."While the fundamentals of security remain unchanged, agentic AI profoundly alters the threat landscape. The greatest risk is not external attack, but self-inflicted disruption from poorly governed agents. Enterprises must treat continuous disruption as the new normal and recalibrate their security strategies accordingly,"said Duncan Brown, group vice president, Worldwide Security Products, Worldwide Sustainability at IDC.

Executive snapshot

• Key takeaways
• Recommended actions

Situation overview

• With agents, nothing changes
  • Framework phases
  • Security domains
  • Purpose and use
• With agents, everything changes
  • Agentic risk classes
    • External agentic threats
    • Internal agentic threats
    • Agents in security toolsets
• Elements of IDC's Cybersecurity Capabilities Assessment Framework 2.0: Agentic considerations
  • Phases of IDC's Cybersecurity Capabilities Assessment Framework 2.0
    • Vulnerable organization
      • Description
      • Business outcome
    • Protected organization
      • Description
      • Business outcome
    • Resilient organization
      • Description
      • Business outcome
    • Optimized organization
      • Description
      • Business outcome

Advice for the technology buyer

Learn more

• Related research
• Synopsis