Business Software Alliance has launched its 2027 Global Cyber Agenda for an AI World, urging governments in India and elsewhere to update cybersecurity policy.
The trade association, whose members include software companies such as OpenAI, IBM, Adobe, Oracle, Autodesk, Microsoft and Box, sets out eight priority actions it says are needed as advanced AI systems change the nature of cyber threats.
At the centre of the agenda is a call for governments to prioritise the use of AI in cybersecurity and give cybersecurity professionals priority access to advanced AI cybersecurity systems. Companies have already begun taking steps to make such tools available to trusted defenders, BSA said.
BSA argues that current AI systems can independently identify vulnerabilities, combine exploits and carry out cyberattacks. It says this marks a structural shift in cyber risk, with attacks becoming faster to launch, easier to scale and less dependent on deep specialist expertise.
That change means policies built for a slower, more human-led threat environment may no longer be enough. At the same time, established approaches such as C-suite oversight, public-private cooperation and internationally recognised standards remain important, the group says.
Policy priorities
The agenda recommends improving vulnerability management, replacing or updating legacy systems that continue to run beyond their supported life cycles, and building resilience into technology systems so organisations can continue operating during incidents and recover more quickly.
It also calls for closer alignment of cybersecurity regulations, arguing that fragmented and overlapping rules can divert resources away from security work. Another recommendation is upgrading to post-quantum cryptography and measuring cybersecurity performance through operational metrics such as mean time to detect and mean time to respond.
The focus on India comes as policymakers and businesses in the country weigh how to expand AI use while managing new risks. BSA links its proposals to wider international debates over how governments should respond to cybercrime, deepfakes and threats tied to increasingly autonomous software tools.
Ahead of the launch, the association pointed to comments by Prime Minister Narendra Modi at the India Mobile Congress 2026 on the need for a global framework to address cybercrime and AI-driven deepfakes. It also cited the India AI Mission as a sign that AI adoption is moving further into the economy.
Venkatesh Krishnamoorthy, Country Manager, India, Business Software Alliance, said the report was intended to map out how policymakers could respond. "Prime Minister Narendra Modi's recent call at the India Mobile Congress 2026 for a global framework to address cybercrime and AI-driven deepfakes reinforces the importance of international cooperation in tackling emerging cybersecurity threats. As the India AI Mission accelerates AI adoption nationwide, cybersecurity must keep pace. BSA's 2027 Global Cyber Agenda shows how India can harness AI for cyber defence, align its rules with global norms and prepare critical systems for the post-quantum era to build a safe and trusted digital economy," Krishnamoorthy said.
Broader shift
The document reflects growing concern across the technology industry that AI is reshaping both offence and defence in cybersecurity. Security teams are increasingly looking at AI tools to help identify weaknesses, detect intrusions and speed up incident response, while governments are examining whether existing laws and regulatory structures are equipped for more automated forms of attack.
BSA says access to advanced defensive AI tools should be prioritised for trusted cybersecurity professionals as threat actors gain access to more sophisticated systems. It also argues that policy reform should focus not only on preventing attacks, but also on maintaining operations and improving recovery when incidents occur.
The agenda is designed to help defenders keep pace with threats that are becoming faster and more sophisticated, the association said.