Fortinet: AI Skills Key to Closing the Cyber Security Gap

84% of cybersecurity professionals expect AI to enhance their roles, offering efficiency and relief amid cyber skill shortages, but they require upskilling to unlock full potential

Fortinet, the global leader in cybersecurity driving the convergence of networking and security, has released its 2025 Global Cybersecurity Skills Gap Report, highlighting how the persistent shortage of skilled cybersecurity professionals continues to expose organizations to escalating digital and financial risks—particularly in the Philippines.

The report underscores a critical paradox: while organizations are increasingly turning to artificial intelligence (AI) to strengthen defenses and offset staffing shortages, many lack the AI expertise needed to deploy these tools effectively. At the same time, cybercriminals are leveraging AI to launch more sophisticated and damaging attacks.

Key findings from the Philippine survey reveal that:

• AI is a double-edged sword, offering protection while also enabling more advanced cyberattacks amid limited AI skillsets within security teams.
• Lack of cybersecurity awareness and training remains the leading cause of breaches.
• Boards of directors prioritize cybersecurity but continue to lack sufficient cyber knowledge.
• Organizations strongly prefer cybersecurity professionals with certifications.

“This year’s survey shows how the cybersecurity skills gap continues to challenge organizations worldwide, including those in the Philippines,” said Bambi Escalante, Country Manager of Fortinet Philippines. “Organizations face rising breach incidents and greater financial impact when this gap remains unaddressed. The findings point to a crucial moment for both the public and private sectors to take decisive action to develop and retain cybersecurity talent. Delaying action will only amplify risks and costs.”

Skills Gap Drives Rising Breaches and Financial Losses

As cyber threats intensify, organizations increasingly view breaches as inevitable rather than avoidable. The report estimates a global shortage of more than 4.7 million cybersecurity professionals, leaving critical security roles unfilled when they are most needed.

In the Philippines:

• 98% of organizations experienced at least one cyber breach in 2024, with 34% reporting five or more incidents—a sharp increase from 2021, when 86% reported breaches.
• Nearly half (49%) cited insufficient cybersecurity skills and training as a primary cause of breaches.
• Financial losses remain substantial, with 47% of organizations reporting cyber incidents costing over USD 1 million in 2024.

AI Adoption Accelerates, but Expertise Lags Behind

AI continues to gain traction as a critical tool for modern cybersecurity, yet the lack of expertise threatens its effective use:

• 100% of organizations surveyed are already using or plan to deploy AI-enabled security solutions, particularly for threat detection and prevention.
• 84% of cybersecurity professionals believe AI will enhance—not replace—their roles, easing pressure on understaffed teams.
• While 88% say AI improves security effectiveness, 64% of IT decision-makers cite insufficient AI expertise as the biggest barrier to successful implementation.

Board-Level Focus Rises as AI Awareness Falls Short

Cybersecurity is increasingly viewed as a core business issue:

• 90% of boards increased their focus on cybersecurity in 2024, with nearly all organizations recognizing it as both a business (100%) and financial (94%) priority.
• However, only 66% of respondents believe their boards fully understand AI-related cyber risks, with awareness closely tied to whether AI is already integrated into security programs.

Certifications and Upskilling Remain Essential

As organizations seek to close the talent gap:

• 82% of IT decision-makers prefer hiring certified cybersecurity professionals, citing validation of expertise, continuous learning, and familiarity with vendor tools.
• Despite this, organizational funding for certifications has declined, with only 82% now willing to sponsor employee certifications, down from 98% in 2023.

Closing the Gap Is Key to Business Resilience

The 2025 Global Cybersecurity Skills Gap Report reinforces that addressing the skills shortage is critical to long-term business resilience. Organizations must modernize hiring practices, expand access to training and certifications, and invest in advanced security technologies. Progress depends on three pillars: education and awareness, accessible upskilling opportunities, and technology adoption.

To support this effort, the Fortinet Training Institute continues to offer one of the industry’s most comprehensive cybersecurity training and certification programs, including Security Awareness Training with AI-focused modules covering generative AI and AI-powered threats.

As part of its long-term commitment, Fortinet is on track to train one million people in cybersecurity worldwide by the end of 2026, strengthening the global talent pipeline and helping organizations build a more cyber-resilient future.