A new global report from Fortinet has warned that while AI is already transforming cybersecurity operations, the technology’s benefits are being limited by a lack of specialist knowledge.

The 2025 Global Cybersecurity Skills Gap Report, published by Fortinet, reveals that 87% of cybersecurity professionals expect AI to enhance their roles by improving efficiency and easing workload pressures.

However, nearly half of IT decision-makers (48%) cite a shortage of AI expertise as the biggest barrier to successful implementation – leaving many organisations unable to realise the full potential of the tools they have adopted.

According to the research, 97% of organisations are already using or plan to deploy AI-enabled cybersecurity solutions, particularly in areas such as threat detection and prevention. Yet Fortinet’s findings suggest that adoption alone is not enough: 76% of organisations that experienced nine or more cyber-attacks in 2024 already had AI systems in place, indicating that skilled human oversight remains essential.

Escalating threats and costs

The report paints a stark picture of the consequences of the cyber skills shortage.

Eighty-six percent of organisations experienced at least one breach in 2024, with 28% reporting five or more incidents – a steep increase from Fortinet’s 2021 survey. More than half (52%) said that cyber incidents cost them over $1 million last year, continuing a trend of rising financial impact.

A lack of trained personnel remains one of the most significant contributors to these breaches, with 54% of respondents identifying insufficient security skills and training as a key cause.

The report estimates that more than 4.7 million cybersecurity roles remain unfilled worldwide, intensifying pressure on already stretched security teams.

Boards increase cyber focus but lag on AI awareness

Cybersecurity has become a board-level priority for most organisations, with 76% of boards increasing their focus on the issue during 2024. Nearly all respondents now view cybersecurity as both a business (96%) and financial (95%) priority.

However, board-level understanding of AI’s potential risks remains limited. Fewer than half (49%) of respondents said their boards fully understood the threats posed by AI, and awareness was highest in organisations already deploying AI-based defences.

Recommended reading

• 81% of Scottish Businesses Seeing AI Productivity Gains
• UK Gov M365 Copilot Trial Found Little Productivity Gains
• AI is Rendering The Way We Measure Productivity Obsolete

Instead the report also highlights shifting attitudes toward cybersecurity training and certification. Eighty-nine percent of IT decision-makers prefer to hire certified candidates, seeing certification as a way to validate technical knowledge (67%), ensure professionals stay current in a fast-evolving field (61%), and confirm familiarity with vendor-specific tools (56%).

Despite this, organisational willingness to fund employee certifications has dropped sharply – from 89% in 2023 to 73% in 2025 — suggesting that while demand for skills is rising, investment in workforce development is not keeping pace.

Carl Windsor, Chief Information Security Officer at Fortinet, said: “This year’s survey further underscores the urgent need to invest in cybersecurity talent. Without closing the skills gap, organisations will continue to face rising breach rates and escalating costs.

“The findings highlight an inflection point for both public and private sectors: Without bold action to build and retain cybersecurity expertise, the risks and costs will only continue to grow for our society.”