Cybersecurity-focused Global Capability Centres (Cyber GCCs) in India are playing an increasingly strategic role in helping global enterprises strengthen cyber resilience, accelerate secure AI adoption, drive innovation, and manage emerging cybersecurity and digital risks, according to the latest report, ‘Secure in India 2026: Cyber GCCs in the Age of AI’, released today at the Data Security Council of India’s (DSCI’s) Cyber for Global Summit 2026. The study highlights how Cyber GCCs have evolved into key drivers of global cybersecurity strategy, cybersecurity talent, innovation, and resilience in an increasingly complex threat environment.
Key findings from the report:
Cybersecurity talent remains a critical differentiator:
- AI security has emerged as the top-priority cybersecurity skill area for Cyber GCCs.
- Demand is rising sharply for skills in cyber resilience, governance, cloud security, risk assessments, and cybersecurity architecture.
- Cybersecurity workforce stability has improved, with nearly half of Cyber GCCs reporting attrition below 7 per cent.
- Training programmes, participation in cyber forums, collaborative learning and AI-powered learning tools are among the most preferred approaches to develop talent.
AI is reshaping cybersecurity operations:
- AI has emerged as a force multiplier for Cyber GCCs, delivering greater operational efficiency and improved risk and threat management.
- Key AI-enabled cybersecurity use cases include automation of various security tasks, third party cyber risk management, enhanced threat modelling, improved SOC alert triage, and faster analysis of cyber threats.
- Data security and privacy concerns, governance and compliance risks, and model vulnerabilities rank among the top AI security challenges.
- Many organisations are now implementing AI security policies, governance functions, risk assessment frameworks and dedicated monitoring capabilities to manage AI-related risks.
Cyber GCCs are becoming centres of innovation:
- Significant number of Cyber GCCs now operate dedicated cybersecurity R&D labs.
- Cybersecurity operations, risk assessments, engineering and automation are emerging as priority domains for innovation.
- Increasing demand for specialised cybersecurity expertise, autonomous security operations and AI-led innovation are expected to shape the future of Cyber GCCs over the next three to five years.
Cyber resilience remains a boardroom priority:
- Evolving regulations, third-party risk management and cybersecurity challenges arising from emerging technologies remain leading concerns for Cyber GCC leadership.
- AI misuse, operational technology security risk, software supply chain risks and third-party cyber risks have emerged among the key cybersecurity risks tracked by global boards.
- AI security, OT security and quantum security have become critical and Cyber GCCs are playing a significant role in strengthening their global organisations deal with them
Cyber GCC ecosystem continues to expand and mature:
- More than 25 per cent of Cyber GCCs now have nearly half of their global cybersecurity workforce based in India.
- 51 per cent of organisations have global cybersecurity teams reporting into India-based cyber GCC leadership.
- 80 per cent of Cyber GCCs have representation in global cybersecurity committees, reflecting their growing strategic influence.
- Availability of cybersecurity talent, uninterrupted service delivery, and innovation remain the primary factors driving the Cyber GCC model.
Commenting on the report’s findings, Srinivas Potharaju, Partner and Head, Cyber Security & Technology, KPMG in India, said, “In an environment marked by technological disruption, evolving cyber threats and rapid AI adoption, Cyber GCCs in India have evolved into trusted partners for cybersecurity and digital risk management. They are increasingly leading innovation, strengthening resilience and enabling global organisations to navigate complexity with confidence. As their role continues to expand, Cyber GCCs are poised to play a defining role in shaping the future of secure and resilient global organisations.”
Vinayak Godse, CEO, Data Security Council of India (DSCI), said, “Global Capability Centers in India have moved well beyond operational delivery, they now anchor innovation, digital engineering, AI, and cybersecurity for some of the world’s largest enterprises. This shift has made GCCs custodians of critical intellectual property, sensitive data, and interconnected digital operations that make cyber resilience a boardroom priority rather than a technology function. Our findings show cybersecurity maturity emerging as a defining differentiator for GCCs, and India, with its talent depth and innovation ecosystem, is uniquely placed to lead on both business transformation and cyber resilience.”
As global enterprises balance accelerating AI adoption with rising cyber threats, regulatory complexity and geopolitical uncertainty, Cyber GCCs in India are increasingly serving as trusted partners for cybersecurity and digital risk management. The report highlights that their expanding capabilities in talent development, AI security, innovation and resilience will continue to strengthen India’s position as a leading global hub for cybersecurity leadership, innovation, and secure digital transformation.
