Barracuda Survey Finds AI and Advanced Threats Widen Cybersecurity Skills Gaps

· Original article ↗

Summary

Barracuda Research’s survey of IT and security professionals at organizations with 100–2,000 employees finds widespread skills gaps, especially around AI risks and advanced identity and phishing threats, and calls for stronger human expertise and governance.

Key points

  • 94% of respondents report cybersecurity skills gaps; the most common challenges involve AI-related risks (68%) and advanced identity and phishing threats (67%).
  • 35% cite gaps in incident-response speed and pressured decision-making; 32% struggle to translate technical risk into business impact.
  • 67% say their teams struggle to scale as business needs expand, while 40% say expectations exceed their teams’ skills and tools.
  • 79% report AI is affecting security roles or head count; 56% say they have experienced workforce reductions linked to AI.
  • 56% say they need more expertise in incident response, pressured decision-making, and risk management; 61% report a need for strategic security leadership skills, including AI governance.
  • The report recommends combining AI and automation with human expertise, judgment, oversight, and development pathways for emerging cybersecurity professionals.

Article Details

Publisher
Barracuda Research
Scope
International survey of IT and security professionals at organizations with 100–2,000 employees
Key Statistics
  • 94% of respondents reported cybersecurity skills gaps.
  • 68% cited AI-related risks as a skills challenge.
  • 67% cited advanced identity and phishing threats as a skills challenge.
  • 79% reported that AI was already affecting security roles or head count.
  • 56% said their organization needed additional expertise in incident response, decision-making under pressure, and risk management.
Recommendations
  • Combine AI and automation with human expertise, judgment, and oversight.
  • Create development pathways and hands-on experience opportunities for the next generation of cybersecurity professionals.
  • Build strategic security leadership capabilities, including AI governance and translating technical risk into business impact.