Despite rising (AI) risks, additional investments and recruitment in cybersecurity continue to face internal resistance at many companies. Fortinet warns of a skills shortage.
A report from Fortinet shows that organizations worldwide are struggling with a shortage of specialized cybersecurity personnel, despite the growing threat of AI-driven cyberattacks. The survey of over 1,000 IT leaders points to a concerning situation: 86 percent of organizations reported one or more security incidents in the past twelve months, with 52 percent experiencing damages exceeding one million dollars.
Despite these financial risks, the cybersecurity skills gap remains a persistent problem. For the third consecutive year, IT leaders cite this shortage as a cause of security incidents. Nevertheless, nearly half of security leaders struggled to get approval for additional staff, while 51 percent have a need for experienced seniors.
Skills gap
The deployment of artificial intelligence within organizations brings not only benefits but also creates new cybersecurity challenges. According to the report, only half of executives believe their board members are fully aware of the risks that AI entails.
This lack of awareness contributes to a growing gap in cybersecurity skills. For instance, 63 percent of organizations expect to have a greater need for roles focused on AI oversight and governance within cybersecurity teams over the next three years.
The adoption of AI-driven cybersecurity tools is nonetheless widespread: 91 percent of respondents are using or testing such solutions. 84 percent see AI as a means to increase the efficiency of IT and security teams. This does not mean all opinions are positive. 38 percent of organizations still doubt the reliability of AI in cybersecurity, and 44 percent cite defense against AI-driven cyberattacks as their biggest concern.
Certifications and training
Despite internal resistance to additional hiring, investments in certifications and training are increasing. According to the report, 92 percent of organizations are willing to pay for employees’ cybersecurity certifications, compared to 73 percent in 2025. Additionally, 71 percent of companies are setting formal recruitment targets for undiscovered talent. To increase diversity in cybersecurity teams, 92 percent utilize internships.
However, the biggest challenge remains finding cybersecurity talent with specific AI experience. Of the respondents, 60 percent indicate that this is the biggest hurdle in recruiting. To bridge this gap, 92 percent plan to invest in AI-related cybersecurity training or certifications over the next twelve months.
In addition, 59 percent are developing internal training programs, while 52 percent purchase training from external vendors. Reskilling programs focus on AI skills such as model development (55%), tool oversight (54%), and security automation (52%).