SANS 2026 Workforce Report Finds Cybersecurity Skills Gaps Outpace Staffing Shortages

Article Details

Publisher

SANS | GIAC

Scope

Global cybersecurity workforce survey covering AI adoption, regulatory compliance, hiring, skills validation, training, and retention, supplemented by organizational case studies.

Sample Size

947 global respondents. Percentages generally exclude Unknown/Unsure responses; multiple-selection questions may exceed 100%.

Key Statistics

• In the 2026 survey, 60% identified skills gaps as the greater workforce challenge, compared with 40% citing staffing shortages; the corresponding figures in 2025 were 52% and 48%.
• 54% reported having AI security governance policies, while 38% provided comprehensive AI security training to all staff or cybersecurity teams.
• 55% reported that senior cybersecurity positions required six months or longer to fill.
• Unclear career paths were a hiring challenge for 32%, compared with 9% in the previous year; only 24% reported well-defined and communicated cybersecurity career paths.
• Training obstacles included workload-related time constraints for 60% and budget limitations for 54%; respondents could select multiple obstacles.

Recommendations

• Establish an AI governance program and baseline AI security training, prioritizing teams with the highest AI exposure.
• Develop entry-level talent through structured mentorships and on-the-job rotations that teach effective work alongside AI tools.
• Use workforce frameworks such as NICE, ECSF, or SCyWF to define job qualifications and requisitions.
• Define and communicate security career paths, validate and document team skills, and establish plans to close identified capability gaps.
• Prepare an incident response plan involving communications, legal, HR, finance, and executive leadership alongside the security team.