Fortinet’s 2026 Cybersecurity Skills Gap Global Research Report, based on a December 2025 survey of 2,750 IT and security decision-makers across 32 locations, shows a clear divide: companies are racing to adopt AI for defence while struggling to find people who can manage it.
AI Is Now Mainstream
Nearly every organization (91%) is either using AI-powered security tools (49%) or experimenting with them (42%). About 84% say these tools make their teams more effective, up from 80% last year. Asia Pacific leads adoption at 58%, underscoring how quickly AI is becoming operationally embedded.
Trust is growing too. Around 42% would let AI handle core security functions independently, and only 1% would not trust it at all. Yet worries remain. Data leakage (45%) and defending against AI-powered attacks (44%) top the list of concerns.
Breaches Have Become the New Normal
Some 86% of organizations had at least one breach in the past year, and 29% had five or more. Over half (52%) say breaches cost more than $1 million. Recovery is also slowing: 20% needed four to six months to recover, up from 14% in 2024. Malware, phishing and web attacks account for 78% of incidents.
The top perceived causes are human ones: lack of skills (56%), lack of awareness (55%) and lack of the right tools (54%).
Boards Say the Right Things, But Spending Lags
While 73% say cybersecurity is a high priority for their board, only 59% say it has real budget behind it, down from 63%. Just half believe their board members are “fully aware” of AI risks. Meanwhile, 50% report that board members or executives have faced penalties, including fines, jail time or job loss, after an attack.
The Skills Gap Is Widening
Some 71% say the skills shortage creates added risk, up from 67% in 2024. Finding talent with AI experience is the top recruiting challenge (60%), and 63% expect more demand for AI oversight and governance roles within three years. Asia Pacific feels this most, with 66% struggling to find AI-skilled candidates.
Senior talent is in particular demand: 51% need senior-level skills most, versus 32% for mid-level and 13% for entry-level roles. Retention is also a problem, with 48% saying a lack of training and upskilling can push people away.
Certifications Still Carry Weight
About 91% prefer hiring candidates with technology-focused certifications, and 92% would pay for an employee to get certified —a rebound from 73% last year. Also, 92% plan to invest in AI-related security training in the next 12 months.
Hiring From Wider Pools Gets Harder
While 71% have formal targets to hire from underrepresented groups, workforce makeup has barely shifted: women make up just 26% of IT and security staff. Notably, 31% now find qualified women candidates hard to find, up from 20% last year.
The Takeaway
The report’s message is clear: AI should augment human expertise, not replace it. Organizations that pair strong training, informed boards and resilience planning with smart technology will be best placed to cope. With 87% expecting to grow their security teams in the coming year, the race for skilled talent is only intensifying.
Note: The research was conducted by Sapio Research and published by Fortinet, a security vendor with a training business, so readers may wish to weigh its findings accordingly.
