The Business Software Alliance (BSA) has urged governments worldwide to revise their cybersecurity policies as artificial intelligence changes how organisations protect their systems and how cybercriminals conduct attacks. In its 2027 Global Cyber Agenda for an AI World, the industry association outlined eight priority actions aimed at strengthening cyber defence, modernising outdated infrastructure and preparing organisations for emerging security threats, including those associated with quantum computing.
Why Are New Cybersecurity Policies Needed?
BSA has called for cybersecurity regulations that address the growing use of AI in both defensive and malicious activities.
The organisation recommended giving cybersecurity professionals priority access to advanced AI technologies to help identify vulnerabilities and strengthen protection against potential attacks. It also emphasised the need for greater alignment between cybersecurity regulations, warning that overlapping requirements can divert resources away from practical security improvements.
Coordinated policies could help organisations focus more effectively on implementing safeguards while meeting regulatory obligations.
What Risks Do Outdated Systems Pose?
The agenda highlighted concerns about older technology systems operating beyond their supported lifecycles. Such systems can create security challenges as cyber threats become increasingly sophisticated.
BSA recommended modernising existing infrastructure and improving organisational resilience to ensure essential services continue during cybersecurity incidents. It also stressed the importance of developing recovery capabilities so organisations can restore operations quickly following an attack.
Why Is Post-Quantum Security Important?
Preparing for post-quantum cryptography is another priority identified in the agenda. The technology is designed to protect sensitive information against potential future attacks involving sufficiently powerful quantum computers.
BSA encouraged governments and organisations to prepare critical systems for this transition while strengthening international cooperation. The association also recommended using internationally recognised cybersecurity standards to support consistent protection across different regions.
How Can Organisations Improve Cyber Defence?
BSA recommended measuring cybersecurity performance through operational indicators rather than relying exclusively on compliance requirements. These include the time organisations take to detect potential threats and respond to security incidents.
Such measurements could help institutions assess the effectiveness of their existing safeguards and identify areas requiring improvement. The agenda also highlighted senior management oversight and cooperation between government agencies and private organisations as important elements of cybersecurity preparedness.
What Does This Mean for India?
BSA’s India country manager, Venkatesh Krishnamoorthy, highlighted the importance of international cooperation as India expands its adoption of artificial intelligence.
He emphasised aligning domestic cybersecurity regulations with global approaches and preparing critical infrastructure for future technological challenges.
The recommendations encourage policymakers to strengthen cybersecurity frameworks while supporting organisations in improving their detection, response and recovery capabilities.
The420 Insight: What Should Governments Prioritise?
The recommendations highlight the need to modernise cybersecurity policies alongside technological developments.
As AI becomes more widely adopted, governments and organisations will need to address vulnerabilities in ageing infrastructure, improve incident response and prepare for emerging encryption-related risks. The central challenge will be ensuring that cybersecurity regulations remain effective as technologies and cyber threats continue to evolve.
