The first day of Global Security Exchange 2026 placed a powerful question before the international security community: is security merely a cost to be controlled, or is it a strategic capability that protects and creates organisational value?

Organised by ASIS International, GSX 2026 opened on 14 September at the Georgia World Congress Center in Atlanta. Day One featured a keynote presentation, educational sessions, interactive workshops, technology exhibitions and professional networking.

The opening keynote by Peter H. Diamandis, titled Beyond the Budget Battle: An Abundance Framework for Security Leaders, focused on the rapid development of artificial intelligence and other exponential technologies—and what those changes could mean for the economics and delivery of security.

ASIS International’s official post-event summary identified three central takeaways from the keynote: the combination of computing power and investment driving AI development, the extraordinary speed of growth in the AI sector, and the way technology is changing the nature of security risk.

These ideas deserve careful examination from a Nigerian perspective.

Why AI Is Accelerating Now

Artificial intelligence is not a new field. Its recognised academic origins are commonly traced to the Dartmouth Summer Research Project on Artificial Intelligence in 1956, where researchers gathered to explore how aspects of human learning and intelligence might be simulated by machines.

Why, then, has AI advanced so rapidly in recent years?

According to the official ASIS keynote summary, Diamandis pointed to two major factors: computing power and capital.

The development of advanced computer chips, cloud infrastructure and large-scale data centres has made it possible to train increasingly capable AI models. At the same time, unprecedented investment is financing the researchers, infrastructure and commercial applications required to move AI from laboratories into everyday organisational use.

Global AI spending is forecast to reach approximately $2.6 trillion in 2026. This includes investment in hardware, software, infrastructure and related services. ASIS used the scale of this investment to illustrate how seriously governments and businesses are treating AI development.

The exact figures will continue to change, but the direction is unmistakable: AI capability is improving rapidly, becoming more accessible and influencing a growing number of industries.

For Nigeria’s security sector, the issue is no longer whether AI will affect security operations. The more urgent question is whether organisations are preparing to use it responsibly and defend themselves against the risks it creates.

Security Cannot Be Managed at Yesterday’s Speed

Rapid technological development offers security organisations new capabilities. AI-assisted systems can help review surveillance footage, identify unusual activity, analyse large amounts of information and prioritise incidents that require human attention.

The same capabilities, however, can also strengthen threat actors.

Research has demonstrated that advanced AI agents can exploit known software vulnerabilities when provided with technical descriptions. A 2024 study found that GPT-4 successfully exploited 87 per cent of a small test set of 15 one-day vulnerabilities when it was given their CVE descriptions.

This finding should not be generalised to mean that 87 per cent of all exploited vulnerabilities are attacked on day zero. It does, however, illustrate how AI may compress the time available for defenders to respond to known weaknesses.

Attackers can increasingly use automation to search for vulnerabilities, test possible entry points and operate at a speed that manual security processes cannot easily match.

Security departments cannot respond to machine-speed threats with slow reporting, delayed maintenance and procedures that are reviewed only after something goes wrong.

For Nigerian organisations, this creates a pressing need to improve patch management, technology inventories, access control, incident escalation and coordination between physical-security and cybersecurity teams.

It also reinforces a central lesson from Day One: continuous improvement is no longer optional.

When Physical Security Becomes Firmware Security

One of the most striking statements in the ASIS summary was that “physical security is now firmware security.”

The statement reflects the extent to which physical-security operations have become dependent on connected technology.

CCTV cameras, access-control readers, alarms, biometric devices, intercoms, tracking systems and building-management platforms are no longer isolated pieces of equipment. Many contain software, connect to organisational networks and receive updates from manufacturers.

This creates a new category of exposure. A camera may be physically installed and operational while its software remains vulnerable. An access-control device may protect a door while also providing an unprotected digital entry point. A poorly secured monitoring platform may expose footage, employee information or facility data.

For years, many organisations treated physical security and cybersecurity as separate responsibilities. That division is becoming increasingly difficult to maintain.

Security managers must know what connected devices are installed, who is responsible for updating them, how access credentials are controlled and what happens when a vulnerability is discovered.

Procurement teams must also assess the security and support arrangements behind a product—not only its price and advertised features.

The Nigerian market should not become a destination for obsolete, unsupported or poorly secured equipment simply because it is affordable.

A low-cost security device can become expensive when it creates an unmanaged vulnerability.

Moving Beyond the Security Budget Battle

The keynote also returned to a familiar struggle: security leaders are frequently required to justify protection as an expense rather than demonstrate it as a source of value.

This challenge is particularly visible in Nigeria, where security decisions are often driven by immediate cost. Organisations may reduce guard numbers, postpone maintenance, delay training or purchase inexpensive equipment without examining whether the resulting system can perform effectively.

A more useful conversation begins by identifying what security protects.

Security protects employees, customers, information, physical assets, operational continuity, regulatory compliance and organisational reputation. It can reduce disruption, prevent avoidable losses and support confidence among clients, investors and business partners.

This value must be documented.

Security leaders should connect incident reports, response times, access violations, equipment availability, training completion and recurring vulnerabilities to wider organisational risks.

They should explain the likely consequences of unresolved weaknesses and show how proposed investments will reduce exposure.

The objective is not to claim that every security expense will generate direct financial returns. It is to demonstrate that security decisions have measurable operational and strategic consequences.

Technology Must Solve a Defined Problem

The GSX 2026 exhibition hall opened on Day One with technologies and services covering surveillance, access control, communications, risk intelligence and integrated security operations.

Innovation can be valuable, but organisations should resist purchasing technology simply because it appears advanced.

Before acquiring a new system, management should ask:

• What security problem is the system intended to solve?
• Who will operate it?
• What infrastructure does it require?
• How will it be maintained?
• What information will it collect?
• How will alerts be assessed?
• Who will respond when it detects a problem?

A camera does not create protection merely by recording an incident. An access-control system does not provide security if credentials are carelessly issued. An analytical platform creates little value when personnel cannot understand its outputs.

Technology must improve decisions and response. Otherwise, it may only produce more footage, alerts and information.

Tomorrow’s Security Leaders Need Broader Skills

Day One also included a Game Changer session on what the next generation of security leaders needs to know, alongside educational sessions covering intelligence, executive decision-making, converged risk, professional development and executive protection.

The programme reflects the expanding responsibilities of the security profession.

Operational experience remains important, but it is no longer sufficient on its own. Modern security leaders require competence in technology, data analysis, communication, budgeting, risk assessment, compliance and organisational strategy.

They must be able to translate security information into language senior decision-makers understand. They must distinguish isolated incidents from developing patterns and recommend practical action.

This has direct implications for Nigerian private security companies. Promoting a capable operative into a supervisory position without further development may create a leadership gap.

The ability to perform security duties does not automatically provide the skills required to manage personnel, analyse information, brief executives or design a complete security system.

Career development must therefore be deliberate and continuous.

Training Is Part of the Security System

Day One featured an interactive workshop titled Learning as a Strategic Advantage: Successfully Training Your Organization’s Security Teams and Executives .

That title captures an important principle: training should not be treated as an occasional administrative exercise. It is part of the organisation’s security infrastructure.

Threats change. Technology changes. Facilities change. Criminal methods change. Personnel must continue learning after deployment.

Training should be based on the risks and responsibilities of each location. It should cover access control, incident reporting, emergency communication, equipment use, customer interaction, observation, escalation and supervisory accountability.

Executives also require security awareness because their decisions affect staffing, budgets, infrastructure and emergency readiness. A security-conscious organisation cannot be built by the security department alone.

The Nigerian Takeaway

The central lesson from GSX 2026 Day One is not that manpower has become irrelevant or that every organisation must acquire the newest technology.

It is that security must be managed as a complete and continuously improving organisational capability.

Nigeria’s security industry must learn to combine competent people, appropriate technology, reliable intelligence, clear procedures and accountable leadership.

Security companies must move beyond selling guard numbers and begin demonstrating risk reduction, response capability, professional standards and business value.

Client organisations must also look beyond the cheapest proposal or most impressive equipment. They should assess whether the complete system can identify a threat, communicate it, coordinate an appropriate response and remain effective when pressure rises.

Technology is developing rapidly, but technology alone will not create secure organisations.

The advantage will belong to organisations that understand the change, invest intelligently, develop their people and improve faster than the risks confronting them.

That is how global security conversations become meaningful local progress.

Think Security Differently.