Cybersecurity · VIDEO
AI and Identity, Priorities for Cybersecurity in 2027
Jeremy Koppen, CISO of Equifax, illustrates how the adoption of AI is redefining attack and defense dynamics. Static credentials are obsolete, SOC automation is essential, and risk assessment must be contextualized. Discover the key strategies for 2027.
KEY TAKEAWAYS
- AI accelerates both attacks and defenses, requiring a strategic transformation
- Static credentials are vulnerable and passwordless systems are the new norm
- SOC automation and continuous patching are essential to manage the speed of threats
- Identity management for AI agents must be as rigorous as that for humans
- Risk assessment must be tailored to the organization, not based on generic scores
Transcript
Equifax, a global leader in credit management, is accelerating its AI adoption to combat increasingly sophisticated cyber threats. Jeremy Koppen, CISO of Equifax, stated that AI is crucial for innovating quickly and keeping up with the accelerating threat environment.
Key measures include eliminating static credentials, automating SOC operations, using a quantitative risk engine, and implementing continuous patching. Equifax has eliminated passwords for all 22,000 employees and collaborators, extending the passwordless standard to B2B customers. The company is also implementing autonomous agents to replace routine tasks in security operations, with 32% of organizations already using AI in threat detection and incident response, expected to rise to 63% by 2027.
Equifax has developed a quantitative risk engine that considers the organization's specific context, allowing teams to focus on real risks. Continuous patching is now the goal, with the average time to remove known vulnerabilities increasing to 43 days in 2026.
Managing machine identities, such as agents, systems, and APIs, is also crucial. CISOs must build agility and adaptability into their security strategies to address AI, geopolitical factors, and the expected arrival of quantum computing.
The acceleration of AI technology adoption raises important regulatory questions. The cyber risk policy must evolve to cover risks related to autonomous agents and passwordless authentication systems. Implementing advanced technologies involves significant costs, with automated SOC systems costing 20% to 40% more than traditional systems.
Companies must also comply with the NIS2 Directive and DORA Regulation, which introduce new security requirements for critical sectors. Advanced Data Loss Prevention and SIEM solutions are essential to counter emerging threats.
