The cybersecurity industry faces a crucial year in 2025, according to the trends analysis recently published by Isaca, the global association dedicated to promoting digital trust. This report highlights that the year will be marked by an increase in threats driven by artificial intelligence (AI), a shortage of skills in this field and an increasingly complex regulatory environment.
In a context of constant security gaps and new global regulations, such as the NIS2 Directive and the EU Artificial Intelligence Law, the sector will experience an unprecedented transformation. Organizations must anticipate and adapt to these emerging challenges to stay at the forefront.
«The year 2025 will bring significant challenges and transformative opportunities for cybersecurity professionals. Organizations must adapt with agility, make strategic investments in talent and cybersecurity solutions and take advantage of emerging technologies to innovate, ”says Chris Dimitriadis, Global Director of Isaca strategy.
5 key cybersecurity trends for 2025
The company has identified five main trends that will define cybersecurity in 2025:
- Threats driven by AI: Cybercriminals are using AI to develop increasingly sophisticated threats, which complicates the detection of malicious activities. Small and medium enterprises (SMEs) will be especially vulnerable to these attacks.
- Talent scarcity in cybersecurity: The report on the ‘cybersecurity status’ of Isaca reveals a significant decrease in hiring within the sector during the last year. This underlines the importance of cybersecurity professionals continuing to develop and acquire new competences, such as certification Cybersecury Operations Analyst (CCOA) recently launched by Isaca.
The five key trends in cybersecurity for 2025 of Isaca: threats of AI, lack of training and complex regulations and geopolitics
- Greater regulatory load: With the implementation of regulations such as the EU Digital Operational Resilience Law, organizations face greater compliance demands, especially in sectors such as the Financial. This constantly evolving normative environment will require companies to remain informed and agile in decision making, avoiding a mentality based solely on verification lists.
- Complex geopolitical landscape: Cybercriminals are taking advantage of AI and misinformation to commit crimes with a growing degree of sophistication. In addition, concerns about supply chain persist and the attacks perpetrated by states increase. Cybersecurity professionals must manage these external factors with limited resources and comply with stricter regulations.
- Vulnerabilities in the supply chain: The growing dependence on external suppliers increases the risk of cyber attacks. Organizations must strengthen the resilience of their supply chains and collaborate with partners who meet rigorous security standards to minimize the impact of cascade incidents.
