From Legacy to Leadership: Achieving Zero Trust Cybersecurity in Government with AI

Why It Matters

Embedding AI‑powered Zero Trust in the public sector curtails breach impact, lowers remediation costs, and meets emerging regulatory expectations, making cyber resilience a strategic imperative for governments.

Key Takeaways

• 66% cite legacy systems blocking Zero Trust adoption
• AI layer enables Zero Trust without replacing existing infrastructure
• Adaptive MFA reduces false positives, works on legacy code
• Agentic SOC provides real‑time detection, automated remediation
• Microsegmentation limits lateral movement, containing breaches

Pulse Analysis

The shift toward Zero Trust is no longer optional for government bodies; it is a response to a threat landscape where AI‑enabled adversaries exploit every vulnerability. Legacy platforms, which consume up to 80% of IT budgets, create a paradox: agencies must protect data while preserving costly, entrenched systems. Recent data from DXC’s 2025 Trust Report underscores this tension, revealing a 60% rise in ransomware attacks on operational technology and a 76% surge in AI‑driven phishing within a single month. These pressures demand a security model that assumes breach and verifies every transaction, yet can be overlaid on existing architecture.

Artificial intelligence resolves the integration dilemma by acting as an intelligent veneer rather than a wholesale replacement. Adaptive multi‑factor authentication leverages machine‑learning to profile user behavior, granting access dynamically while minimizing friction—a capability 83% of organizations report can be deployed without touching legacy code. Meanwhile, agentic Security Operations Centres ingest massive data streams, flagging anomalies in real time and automating remediation, thereby extending the reach of understaffed cyber teams. AI‑driven microsegmentation further isolates compromised assets, preventing lateral movement and reducing the blast radius of any intrusion.

Strategically, AI‑enhanced Zero Trust dovetails with Australia’s Cyber Security Strategy 2030, which emphasizes resilience, secure‑by‑design development, and cross‑agency collaboration. By embedding these controls within modernization programs, agencies can meet compliance mandates, improve citizen service reliability, and achieve measurable cost savings—evidenced by an 83% incident reduction among early adopters. DXC’s portfolio of 3,200+ cybersecurity experts and partner ecosystems accelerates this transition, offering a scalable path that respects fiscal realities while fortifying national digital infrastructure.