20.500.12556/DiRROS-29597 Human-AI integration in cybersecurity an industry-aligned perspective on incident management The integration of Artificial Intelligence (AI) into cybersecurity incident management has gained momentum amid rising threats and increasing operational complexity. While academic research has been widely analysed and found to predominantly address detection tasks and algorithmic performance, the industry perspective remains under-explored, with limited understanding of its practices and priorities. This paper presents a document analysis of a rich corpus of publicly available, industry-issued reports, to examine how AI is understood, deployed, and evaluated in real-world cybersecurity operations. By contextualising the well-established Technology-Human-Task-Context (THTC) framework to the cybersecurity domain, we identify key dimensions shaping AI integration, including task alignment, human oversight, operational constraints, and expected benefits. Our findings highlight critical gaps in current implementations, such as limited attention to recovery, governance, and task assignment, and emphasise the dual role of human experts as both controllers and beneficiaries. To address these gaps and support actionable system design, we propose a set of industry-aligned recommendations derived from a synthesis of the THTC framework and document analysis. These recommendations encompass AI capabilities, integration requirements, task alignment, outcomes, risk management, control mechanisms, and human factors. Our work offers a comprehensive foundation for aligning academic research with industry needs, guiding the development of AI-powered cybersecurity expert systems that are technically effective, ethically sound, and operationally viable. cybersecurity incident management document analysis academia-industry alignment spletna varnost upravljanje incidentov true false true Springer Nature Angleški jezik Slovenski jezik © The Author(s) 2026 Neznano 2026-05-29 13:19:38 2026-05-29 13:19:38 2026-05-30 03:52:43 0000-00-00 00:00:00 2026 0 0 Nasl. z nasl. zaslona; Opis vira z dne 29. 5. 2026; str. 1-29 Vol. 25, article no. 103 29 May 2026 0000-00-00 Zaloznikova Objavljeno apc 2025-11-18 2026-04-09 2026-05-29 004 1615-5270 10.1007/s10207-026-01259-5 279861507 https://link.springer.com/article/10.1007/s10207-026-01259-5 1 49dc9eed-5b50-11f1-8e51-001a4af901a5 https://dirros.openscience.si/Dokument.php?lang=slv&id=44415 RAZ_Kincl_Jan_2026.pdf RAZ_Kincl_Jan_2026.pdf 1 8D88D9572571D0A80047CFECF804C68B 78bbfa549538ef3aea4a507412fdb506d3edfbcbb4143076ecbbc6e9c346da0b a5f97b9d-5b50-11f1-8e51-001a4af901a5 https://dirros.openscience.si/Dokument.php?lang=slv&id=44416 Institut Jožef Stefan 0 0 0