“Agentic AI for security is at a firewall moment,” Grossman says. “It could be the first time since the advent of the firewall where defenders have an advantage. Agentic AI enables cybersecurity expertise to be democratised and give defenders an advantage over attackers.”

An evolved way to assess cyber risk

With the average cost of cyberattacks passing $4M in Australia, Grossman says we need to look at new ways to understand risk and to measure the potential cost of an attack. Those costs are multi-dimensional and span operational downtime, revenue at risk, regulatory exposure, and brand impact. Quantifying the risks means focussing on outcome-based metrics. And that demands an evolution from the traditional likelihood and impact-based risk assessment.

“Cyber Risk Quantification [CRQ] m

See Full Page