cyber.hendryadrian.com
Security Report · github.com/jacobdjwilson

Fortinet 2026 Report Finds AI Skills Shortages Add to Cybersecurity Staffing Challenges

· Original Report (PDF) ↗

Summary

Fortinet’s survey of 2,750 IT and cybersecurity decision-makers found 71% see skills shortages as a cyber risk and 60% struggle to recruit AI-experienced security talent. Meanwhile, 91% use or experiment with AI-powered security tools.

Key points

  • Sapio Research surveyed 2,750 IT and cybersecurity decision-makers across 32 locations in December 2025 for Fortinet’s 2026 report.
  • Skills shortages were seen as an organizational cyber risk by 71% of respondents, up from 67% in 2024; 60% reported difficulty finding cybersecurity candidates with AI experience.
  • Among respondents, 91% reported using or experimenting with AI-powered security solutions, and 84% said AI-enhanced tools improved team effectiveness and efficiency.
  • Respondents reported substantial breach burdens: 86% experienced at least one breach in the preceding year, 52% reported costs exceeding $1 million, and 29% needed at least four months to recover.
  • While 73% said their boards treated cybersecurity as a high business priority, only 59% reported comparable financial prioritization, down from 63% in 2024.
  • Looking ahead three years, 63% expected greater demand for AI oversight and governance roles; 92% were likely to invest in AI-related cybersecurity training or certifications within 12 months.
  • The report recommends combining AI augmentation with workforce development, broader recruiting, board education, and cyber-resilience exercises rather than treating AI as a replacement for human expertise.

Article Details

Publisher
Fortinet
Scope
Global cybersecurity workforce skills, AI adoption, breach impacts, board governance, certifications, and recruitment across 32 locations.
Sample Size
2,750 IT and/or cybersecurity decision-makers surveyed through online interviews and email by Sapio Research in December 2025; reported margin of error ±1.9% at a 95% confidence level.
Key Statistics
  • 91% of respondents reported using or experimenting with AI-powered cybersecurity solutions: 49% were using them and 42% were experimenting. The experimentation option was newly introduced, limiting year-over-year comparisons.
  • 86% of surveyed organizations reported at least one breach in the preceding 12 months; 29% reported five or more.
  • 52% reported breach costs exceeding $1 million in 2025, compared with 38% in 2021.
  • 71% said the cybersecurity skills shortage created additional organizational cyber risk, compared with 67% in 2024; 60% reported difficulty finding candidates with specific AI experience in cybersecurity.
  • 73% said their boards treated cybersecurity as a business priority to a great extent, but only 59% reported equivalent financial prioritization, down from 63% in 2024.
Recommendations
  • Provide structured AI education and certification pathways, extending foundational AI literacy beyond security teams to IT staff, developers, and business leaders.
  • Strengthen retention through training, cross-training, certifications, mentorship, and clear cybersecurity career progression.
  • Educate board members on cybersecurity and AI risks, establish cyber-resilience strategies, and conduct regular leadership tabletop exercises.
  • Use AI and automation to augment human expertise and reduce repetitive workloads such as alert triage and log analysis rather than replace skilled personnel.
  • Broaden recruitment beyond traditional qualifications and talent pools, supported by onboarding, mentorship, and structured technical development.