AI is reshaping cybersecurity roles, with IT professionals spending more time validating outputs, managing risk, and overseeing AI decisions. Artificial intelligence is changing how cybersecurity teams work, with security professionals spending more time validating AI-generated recommendations and deciding when to trust AI outputs, according to new research from ISC2. The ISC2 survey of 856 cybersecurity professionals found that 65% spent more time deciding when to trust or act on AI-generated recommendations during the past year, while 63% reported spending more time reviewing or validating AI outputs. The study also found that AI-related mistakes remain common. Nearly nine in 10 respondents (89%) said they have experienced AI recommendations that led to incorrect outcomes, and 50% said human decision-makers are ultimately held accountable when those mistakes occur. “AI is not replacing cybersecurity professionals; it is changing what the profession requires of them,” ISC2 CEO Scott Beale said in a statement. “As AI takes on more repetitive tasks, cybersecurity roles are shifting toward higher-value work, from asking the right questions to validating findings, interpreting outputs, and applying human judgment.” The ISC2 survey also revealed that: - 48% said AI has reduced workplace stress. - 32% said it has increased stress. - 62% cited overreliance on AI recommendations as a top concern. - 61% cited undetected errors that could scale rapidly across systems as a top concern. Many cybersecurity professionals are expected to act on AI-generated outputs without fully understanding how those outputs were produced, ISC2 found. Nearly a quarter of respondents (24%) said they are often or very often expected to act on AI-generated outputs without fully understanding how those outputs were produced. Still, respondents emphasized the importance of governance and oversight. About 80% said governance frameworks, understanding when to trust AI outputs, and knowing when to override recommendations are critical for effective