Artificial Intelligence in Cybersecurity and Data Protection: A Study of the Information Technology (IT) Sector

Dr. Mubeen Fatima; Junaid Shaukat; Muhammad Faraz Tahir Bhatti

Authors

Dr. Mubeen Fatima Associate Professor, Riphah International University, Islamabad
Junaid Shaukat Research Scholar, Master of Computer Science, Pir Mehr Ali Shah Arid Agriculture University, Rawalpindi
Muhammad Faraz Tahir Bhatti Research Scholar, BS Information Technology, Minhaj University Lahore

Keywords:

Artificial Intelligence; Cybersecurity; Data Protection; Information Technology Sector; Machine Learning; Generative AI; Threat Detection; Privacy; AI Governance

Abstract

The growing dependence of the information technology (IT) sector on cloud platforms, software services, connected infrastructure, and digital customer data has increased the importance of effective cybersecurity and data protection. Artificial intelligence (AI), including machine learning, deep learning, natural language processing, and generative models, offers opportunities to detect anomalous activity, prioritize alerts, support incident response, and monitor sensitive information. At the same time, AI introduces risks related to privacy, model manipulation, bias, explainability, operational dependence, and misuse by attackers. This paper examines the role of AI in cybersecurity and data protection in the IT sector through a structured narrative review that is supported by secondary quantitative evidence from recent authoritative sources, including the IBM Cost of a Data Breach Report 2026, the Verizon 2026 Data Breach Investigations Report, the FBI Internet Crime Report 2025, the ENISA Threat Landscape 2025 and 2026, and the ISC2 2025 Cybersecurity Workforce Study. The evidence shows that the average global breach cost reached a record USD 4.99 million in 2026, that organizations making extensive use of security AI and automation reported savings of USD 1.93 million per breach, and that attackers increasingly use AI to scale phishing and fraud. It also shows that AI systems have become a new attack surface and that adoption is constrained by skills shortages and weak governance. The paper concludes that AI is best understood as an augmentation of, rather than a replacement for, established security controls and qualified human judgment. It proposes a seven-stage adoption framework, a governance mapping to current standards, and a set of measurable indicators, and it identifies directions for primary empirical research.