The impact of artificial intelligence on the transformation of tasks and competencies in cybersecurity: A preliminary reference framework

Abstract

Artificial intelligence (AI) is changing cybersecurity work primarily at the level of individual tasks, responsibilities, and the relationship between automated support and professional judgement. The paper is designed as a conceptual scientific article whose purpose is to propose a preliminary reference framework for assessing the impact of AI on tasks, responsibilities, and competency requirements in cybersecurity practice. The proposed framework is based on a structured synthesis of selected scientific sources, competency frameworks, and regulatory and guidance documents. The analysis shows that the impact of AI can be meaningfully examined through four roles: AI as a tool for supporting security processes, AI as a factor reshaping threats, AI as an object of protection, and AI as an object of governance and compliance. The proposed framework links these roles to three types of task-related effects: the automation of individual task steps, the restructuring of existing tasks, and the expansion of existing tasks or emergence of new ones. The paper shows that competency requirements should not be understood as a general need for AI knowledge but should be assessed in relation to the specific task, the role of AI in its execution, and the responsibility that remains with the expert or the organisation. The framework provides a basis for further systematic mapping of the literature, further development of the reference framework, and empirical testing in organisational settings.