The global cybersecurity scene is changing faster than many companies can keep up with. Threats are growing, artificial intelligence (AI) is advancing and, in the midst of this vertigo, there is a shortage of professionals capable of handling both realities. This is revealed by Global Cybersecurity Skills Gap Report 2025 of Fortinetwhich warns of an increasingly dangerous imbalance between available technology and the skills needed to manage it.
The study shows a panorama of contrasts: organizations are betting on AI to strengthen their defenses, but at the same time they recognize that this same technology can be used against them. The worrying thing is that many lack the adequate knowledge to safely harness their potential.
A gap that puts business resilience at risk
The deficit of qualified cybersecurity professionals has become a structural problem. Fortinet estimates that more than 4.7 million experts worldwide, a figure that explains why 86% of organizations suffered at least one security breach in 2024 and almost a third faced five or more. The economic impact is also overwhelming: more than half of the affected companies say that the incidents cost them more than a million dollars.
As cyber threats multiply, a lack of talent not only compromises defense capabilities, but exacerbates financial losses and damages corporate reputation. The report data shows that the lack of training and awareness remains the main cause of security failures. And while most boards place cybersecurity among their strategic priorities, their understanding of AI risks remains limited.
For Carl Windsorchief information security officer at Fortinet, the study results are an urgent call to action. “This year’s report further underscores the need to invest in cybersecurity talent. If the skills gap is not closed, organizations will continue to face increasing gaps and costs. We are at an inflection point: without bold measures to develop and retain expertise, the risks will only continue to grow,” he notes.
Artificial intelligence, ally and threat
The role of AI in this context is ambivalent. According to the report, the 97% of organizations already use or plan to implement AI-based cybersecurity solutions. Most use them to detect and prevent threats more quickly, and a 87% of professionals Trust these tools to enhance your work, not replace it.
However, technological enthusiasm collides with a worrying reality: 48% of IT managers admits that it lacks personnel with sufficient knowledge of AI to apply it effectively. This means that, although the tools are available, lack of knowledge about how they work can make them an additional risk. It is no coincidence that the organizations that suffered the most cyberattacks are precisely those that already had AI systems, but without the trained personnel to manage them.
Cybersecurity on the management agenda
The Fortinet study also points to a positive change: boards of directors are increasingly aware of the importance of cybersecurity. In 2024, 76% They devoted more attention to it than in previous years, and almost all the companies surveyed consider it a business and financial priority.
However, this greater attention does not always translate into understanding. Less than half of the managers surveyed say they fully understand the specific risks posed by AI. This gap between intent and knowledge is one of the biggest challenges for organizations, especially in an environment where investment and strategy decisions must be based on accurate and up-to-date information.
Training, certification and digital culture
The lack of talent will not be solved by new hires alone. Fortinet proposes a strategy focused on training, certification and awarenessthree essential pillars to build teams capable of anticipating attacks and not just reacting to them.
The report reveals that 89% of IT managers prefers to hire candidates with recognized certifications, since these demonstrate technical mastery and the ability to constantly update. However, business support for funding such certifications has declined: only 73% are willing to pay for them, down from 89% the previous year.
To reverse this trend, Fortinet is promoting its Training Institutea program that offers certifications and training modules specialized in AI and emerging cyber threats. The goal is to expand access to knowledge and create a generation of professionals who understand both the technology and the risks that accompany it.
