The cybersecurity industry is quietly reshaping itself around a new reality: the threats are no longer just human-driven. As Philippine businesses accelerate their adoption of artificial intelligence tools — from chatbots in customer service to machine learning models in financial risk assessment — the attack surface has expanded in ways that traditional endpoint protection was never designed to handle. ESET's move to embed an AI Security module into its B2B portfolio reflects a broader industry recognition that securing AI systems is now a distinct discipline, not merely an extension of network security.
For Philippine companies, this distinction is becoming urgent. The IT-BPM sector, which remains one of the country's largest employers and foreign exchange earners, has already been under pressure to demonstrate robust security posture to international clients. Meanwhile, the Bangko Sentral ng Pilipinas has tightened its cybersecurity guidelines for banks and non-bank financial institutions, requiring them to manage risks from emerging technologies including AI. Any business in the financial ecosystem that deploys AI-driven fraud detection or credit scoring now needs security tooling that understands model poisoning, prompt injection, and adversarial attacks — threats that a conventional antivirus or firewall simply cannot detect.
The regulatory backdrop adds another layer of pressure. The Data Privacy Act of 2012 and its implementing rules, enforced by the National Privacy Commission, impose obligations on personal information controllers and processors regardless of the technology stack they use. If a company's AI system is compromised and personal data leaks, the liability does not disappear because the breach occurred through a novel vector. The DTI's ongoing digitalization push for MSMEs also means thousands of smaller enterprises are now connected to cloud-based AI services without dedicated security teams, making vendor-provided security modules a practical necessity rather than a luxury.
What to watch next is pricing and accessibility. Enterprise-grade AI security has historically been priced for large corporations. If ESET and its competitors can deliver meaningful protection at a price point that a mid-sized Philippine firm can absorb, the adoption curve will steepen quickly. The more important question, however, is whether Philippine regulators will update their cybersecurity frameworks fast enough to keep pace. The current rules were written before AI became mainstream in business operations, and the gap between regulatory language and technological reality is widening by the month.