EMA Research Blog: Navigating IT and Security Horizons

It comes up in many conversations I have with network engineers and architects these days. They want AI-enhanced management tools.

The cybersecurity world descended on San Francisco's Moscone Center this week for RSAC 2026, the 35th annual flagship event – and the numbers alone tell you this is no niche gathering. Around 43,500 attendees, 700 speakers, 600 exhibitors, and 400 members of the media converged on the conference, which spans multiple stages and countless hands-on experiences. That's a lot of people, and a lot of opinions; some of which are ones I hope you are paying attention to, and some that I would prefer you ignore. After spending the week meeting with some of the best vendors at the conference, as well as a few passing conversations in elevators and airplane queues, four themes kept coming up again and again – and if you're serious about your security program, they're worth paying attention to.

If 2025 was the year the industry aggressively deployed agentic AI to automate everything from code deployment to customer service, 2026 is shaping up to be the year we pay the security debt for that speed. We have effectively built an "AI-native" enterprise ecosystem, but in doing so, we have introduced a new class of insider threat that doesn't sleep, doesn't take breaks, and crucially doesn't think like a human.

As I sit here watching the very soggy Rose Parade, my thoughts drift to the cybersecurity topics and trends we will talk about in 2026 (yes, that is how much of a nerd I actually am).

Well, 2025 has been an extremely interesting year with what can only be described as a massive  explosion of agentic AI. And while agentic might hold a large amount of potential to address deficiencies the industry has struggled with for years, with great power comes great responsibility.

The digital threat landscape is accelerating, making it critical for security leaders to prioritize the most impactful shifts. Instead of trying to tackle every emerging threat, focus your strategy and budget on these five essential cybersecurity trends that will dominate 2026, forcing a fundamental change in how your organization protects its assets.

Welcome to the recap of the Enterprise Management Associates (EMA) Cybersecurity Awesomeness (CSA) Podcast. Hosted by Chris Steffen, Vice President of Research and Ken Buckler, Research Director at EMA, the CSA Podcast covers a wide range of cybersecurity topics, from cyber workforce talent shortages to cyber threat intelligence, to current events in technology and security. This short, laidback podcast is for listeners of all skill levels and backgrounds.

Welcome to the recap of the Enterprise Management Associates (EMA) Cybersecurity Awesomeness (CSA) Podcast. Hosted by Chris Steffen, Vice President of Research and Ken Buckler, Research Director at EMA, the CSA Podcast covers a wide range of cybersecurity topics, from cyber workforce talent shortages to cyber threat intelligence, to current events in technology and security. This short, laidback podcast is for listeners of all skill levels and backgrounds.