IT Leaders report challeneges securing approval for additional bybersecurity talent as skills shortages continue to impact business resilience

As cyber threats become increasingly sophisticated and artificial intelligence (AI) reshapes the digital landscape, organizations around the world are continuing to face a critical shortage of cybersecurity talent, according to Fortinet’s 2026 Global Cybersecurity Skills Gap Report.

The global study, which surveyed more than 2,750 IT and cybersecurity decision-makers across 32 countries and locations, found that the shortage of skilled cybersecurity professionals remains one of the leading factors contributing to security breaches, even as organizations increase investments in training, certifications and AI-powered security tools.

“Cybersecurity is not simply a technical issue but a strategic business risk,” said Dr. Carl Windsor, Chief Information Security Officer at Fortinet. “While boards generally recognize the importance of cybersecurity, more investment is needed to address key issues such as rapidly accelerating AI risks and the ongoing cybersecurity skills shortage. Addressing these issues is critical to business resilience in an increasingly complex threat landscape.”

The findings highlight the growing stakes for organizations operating in an increasingly digital economy. Eighty-six percent of respondents reported experiencing at least one cybersecurity breach within the past year, while more than half said those incidents resulted in losses exceeding US$1 million. For the third consecutive year, a lack of cybersecurity skills was identified as one of the primary causes of these breaches.

At the same time, organizations are finding it increasingly difficult to secure the talent they need. More than half of survey respondents indicated that senior-level cybersecurity expertise is their most pressing workforce need, yet nearly half reported challenges obtaining approval to hire additional cybersecurity personnel.

The rapid adoption of AI is creating both opportunities and new challenges for businesses. The report found that 91 percent of organizations are already using or experimenting with AI-powered cybersecurity solutions, with many reporting improved efficiency and effectiveness among their security teams. However, the technology is also creating new risks, particularly as cybercriminals leverage AI to enhance the scale and sophistication of attacks.

Many organizations are also grappling with the governance implications of AI adoption. Only half of respondents believe their boards fully understand the potential risks associated with employee use of AI technologies, while nearly two-thirds expect a growing need for dedicated AI oversight and governance roles within cybersecurity teams over the next three years.

As demand for specialized skills continues to rise, employers are placing greater emphasis on workforce development and talent pipeline initiatives. Ninety-two percent of respondents said they would be willing to fund cybersecurity certifications for employees, a notable increase from the previous year. Organizations are also strengthening internship programmes, apprenticeships and academic partnerships to attract new entrants and build a sustainable cybersecurity workforce.

At the same time, the growing adoption of AI is creating new skills gaps within cybersecurity teams. Sixty percent of respondents cited difficulty recruiting professionals with expertise at the intersection of AI and cybersecurity. To address this challenge, organizations are increasingly prioritizing targeted upskilling and reskilling programmes focused on areas such as securing AI systems, security automation and AI governance.

According to Fortinet, addressing the cybersecurity skills gap will require a coordinated approach that combines education, professional certification and advanced security technologies. Through its Fortinet Training Institute, the company continues to expand access to cybersecurity training and career development opportunities worldwide as part of its commitment to strengthening cyber resilience and preparing the next generation of cybersecurity professionals.