PUBLISHED DATE: 12 August 2026
The cyber security landscape is evolving
The cyber security landscape is rapidly evolving as malicious actors increasingly use AI to improve the speed, scale and sophistication of attacks. To adapt, cyber defenders can use AI to strengthen analysis, prioritisation and defensive decision making.
Organisations are increasingly exploring how AI can be used to enhance cyber security outcomes. The focus should remain on improving security within the organisation.
Integrating AI for cyber security
The cyber security principles are grouped into 6 functions: Govern, Identify, Protect, Detect, Respond and Recover. This publication outlines how organisations can apply AI within each function to support cyber security.
Govern – Develop and maintain a strong and resilient cyber security culture
Identify – Identify assets and associated security risks
Protect – Implement and maintain controls to manage security risks
Detect – Detect and analyse cyber security events to identify security incidents
Respond – Respond to cyber security incidents
Recover – Resume normal business operations following cyber security incidents
Securely adopting AI
When adopting AI, organisations should prioritise strong security practices. While no mitigation strategy can provide complete protection, organisations should implement a strong cyber security baseline aligned with the ISM to reduce cyber security risk.
Human oversight, governance and Secure by Design practices remain essential to how AI can significantly enhance cyber security, but strong cyber security fundamentals remain most important.
Opportunities for AI in Cyber Defence [PDF, 1.1 MB]
This guidance was co-authored by:
- Canadian Centre for Cyber Security (CCCS)
- United Kingdom National Cyber Security Centre (NCSC-UK)
- New Zealand National Cyber Security Centre (NCSC-NZ)
- Australian Cyber Security Centre (ACSC)
More information
For questions related to this guidance, email info@ncsc.govt.nz