June 30, 2026
Accenture and ServiceNow Want to Make Cybersecurity Legacy Platform Migration Less of a Nightmare Through AI
Accenture and ServiceNow have launched a joint cybersecurity offering combining managed security services with an AI tool for migrating off legacy risk platforms. It tackles a problem most organisations know intimately. The security platform everyone’s stuck with because nobody wants to be the one who breaks it during a migration.
The launch, announced this week, has two parts. The first is a set of managed security services running on the ServiceNow AI Platform. These cover integrated risk management, third-party risk, operational technology risk, and proactive compliance monitoring. The second, and arguably more interesting aspect, is an Accenture-built tool that uses AI to automate the move off legacy risk platforms. Naturally, this is historically one of the more dreaded transformation projects on any CIO’s roadmap.
- ServiceNow to Elevate AI Governance With New Cognizant Neuro AI Trust Integration
- Fresh ServiceNow and Salesforce Layoffs Coincide With Growing Focus on AI Productivity
What’s in the Box Powered By AI
Unified integrated risk management and third-party risk management use AI agents to monitor vendors and handle lifecycle management. This gives security teams one view of risk rather than several disconnected ones. Operational technology risk management brings IT and OT onto a shared platform, which matters much more than it sounds. Industrial control systems and corporate IT security very rarely speak the same language, let alone share a dashboard.
Proactive risk management and compliance use AI agents to track regulatory change and trigger responses before something becomes an incident. The migration tool ties it together, automating what’s traditionally been a slow, expensive, and politically fraught switch.
Rex Thexton, Global Chief Technology Officer at Accenture Cybersecurity, framed the launch around a structural complaint rather than a feature list:
“Companies need more than isolated security tools. They need the ability to connect risk insights, automate decision-making, and respond at enterprise scale.”
It’s a fair point. Most large security estates aren’t short of tools. They’re short of a way to make those tools talk to each other. Lou Fiorello, group vice president and general manager of Security and Risk products at ServiceNow, made the case for where this is heading:
“The future of cybersecurity will be driven by autonomous operations powered by AI. ServiceNow and Accenture are moving customers toward that future by combining enterprise AI, integrated workflows, and deep cyber expertise.”
Data breach costs reached an all-time high in the US last year. The companies cited $10.22 million per incident, up 9% on 2024. More relevant to this launch is a second figure. The gap between a vulnerability being discovered and exploited has shrunk from months to hours, largely because attackers are using AI too. That’s the backdrop against which “we’ll automate your migration” starts to sound increasingly like proper table stakes.
Reading Between the Lines for Legacy Platform Migration
What’s notable here isn’t the tech. Agentic AI bolted onto risk platforms is becoming the industry standard rather than the exception. What’s striking is the framing. Accenture and ServiceNow are pitching an easier exit from whatever you’re currently stuck with, which is a more honest acknowledgement of the actual barrier than most vendor launches manage. Migration projects fail less often because the new platform is bad and more often because the move itself goes wrong. Naming that problem directly, rather than burying it under capability claims, is the smarter pitch.
It also slots Accenture and ServiceNow into a crowded field. Microsoft, Salesforce, and IBM are all chasing similar territory, while ServiceNow’s own parallel expansion with IBM on legacy integration suggests nobody thinks this market is settled yet. Accenture’s recent recognition as a Leader in IDC MarketScape’s cybersecurity GRC assessment gives the partnership some credibility. However, the real test will be deployment numbers rather than analyst reports.
What it Means if You’re the One Signing Off
For CIOs and CISOs weighing platform consolidation, most teams tend to avoid modernisation because the move itself has historically cost more, in time and risk, than staying put. If the migration tooling delivers on that promise, it changes the maths.
For anyone running OT-heavy operations, such as manufacturing, utilities, and logistics, the IT/OT convergence piece deserves a closer look than the headline cybersecurity story usually gets. That’s the key element of the offering that solves a problem that’s been ignored for years, not just repackaged.
