Artificial intelligence is fast becoming a critical lifeline for cybersecurity teams struggling with talent shortages, but without proper skills and training, it could also introduce new risks.
This is the central finding of the newly released 2025 Global Cybersecurity Skills Gap Report by Fortinet, which highlights how organizations in the Philippines and around the world are racing to adopt AI while grappling with a widening shortage of qualified cyber professionals.
The report reveals that as cyber threats continue to intensify, security incidents are no longer a matter of “if,” but “when.” Nearly all organizations surveyed experienced at least one cyber breach in 2024, with more than a third reporting five or more incidents.
This marks a sharp rise from earlier years and underscores how understaffed and undertrained security teams are increasingly vulnerable to attacks.
At the same time, the global shortage of cybersecurity professionals—estimated at more than 4.7 million unfilled roles—has left many organizations exposed. Almost half of respondents identified a lack of cybersecurity skills and training as a leading cause of breaches, while the financial consequences remain severe.
Close to half of affected organizations reported losses exceeding $1 million from cyber incidents in 2024 alone.
AI is widely seen as a way to ease the pressure. Every organization surveyed said it is either already using or planning to deploy AI-enabled security technologies, particularly for threat detection and prevention. Most cybersecurity professionals believe AI will enhance their roles rather than replace them, helping automate routine tasks and allowing teams to focus on higher-value work.
However, the report also highlights a growing disconnect. While AI tools are being rapidly adopted, the expertise needed to use them effectively is lagging behind. More than half of IT decision-makers cited the lack of in-house AI skills as the biggest obstacle to successful implementation, even as a large majority acknowledged that AI is already making their teams more effective.
Board-level attention to cybersecurity is also increasing. Nearly all organizations now consider cybersecurity a core business and financial priority, and most boards have heightened their focus on the issue over the past year.
Yet understanding of AI-related risks remains uneven, particularly in organizations that have yet to fully integrate AI into their security programs.
As the skills gap persists, employers continue to place strong value on certifications as a way to validate expertise and ensure professionals stay current in a fast-changing field. While most organizations still prefer certified candidates, support for funding certifications has declined compared to previous years, raising concerns about whether companies are investing enough in long-term talent development.
The report concludes that closing the cybersecurity skills gap is essential to business resilience, especially as AI reshapes both defense strategies and attack methods. Addressing the challenge will require a coordinated approach that combines stronger awareness and education, expanded access to training and certification, and the responsible adoption of advanced security technologies.
To support these efforts, Fortinet continues to expand its training and certification initiatives, including AI-focused modules designed to help organizations build cyber-aware workforces.
As part of its long-term commitment to developing global cyber talent, the company is working toward its goal of training one million people in cybersecurity worldwide by the end of 2026—a target it sees as increasingly urgent in an era where AI is redefining the front lines of digital defense.