Cybersecurity Hiring Stalls, IT Leaders Face Corporate Pushback

The Fortinet 2026 Global Cybersecurity Skills Gap Report identifies a critical shortage of technical talent as a primary driver of enterprise security breaches. While organizations adopt AI for defense, a lack of executive investment and specialized training creates significant financial and strategic risks.

Eighty six percent of organizations experienced at least one security breach in previous years, while 49% of information technology leaders face corporate resistance when seeking to hire the talent necessary to mitigate AI-driven threats, reports Fortinet. The rising frequency and sophistication of cyberattacks correlate with a disconnect between board-level risk perception and budgetary allocation: companies are not scaling like cyberthreats are doing.

"Cybersecurity is not simply a technical issue but a strategic business risk,” says Carl Windsor, CISO, Fortinet. “While boards generally recognize the importance of cybersecurity, more investment is needed to address key issues, such as rapidly accelerating AI risks and the ongoing cybersecurity skills shortage."

The shortage of cybersecurity skills remains a leading cause of devastating security breaches for the third consecutive year. According to Fortinet, 56% of information technology (IT) leaders attribute successful intrusions to a lack of specialized personnel. 

This deficit occurs during a period of escalating financial consequences for the private sector. Fifty-two percent of organizations report that breaches cost more than US$1 million, which is a notable increase from the 38% reported in 2021. Within North America, the average cost of a breach has reached US$2 million.

Organizational friction at the executive level hampers the ability of security teams to defend the enterprise. Although 51% of leaders indicate a requirement for senior-level cybersecurity skills, nearly half struggle to obtain the necessary approval for additional headcounts. 

This resistance persists despite the direct professional risks to leadership. The report reveals that 50% of executives and board members have faced penalties following a cyberattack. These penalties highlight the high stakes of modern governance, yet the investment in human capital remains insufficient to meet the threat landscape.

The integration of AI introduces new complexities that many corporate boards do not yet fully understand. Only half of the surveyed leaders believe their board members are fully aware of the potential risks stemming from employee use of AI. This knowledge gap is particularly critical as 63% of respondents anticipate an increased need for AI oversight and governance roles within their cybersecurity teams over the next three years.

Companies Must Change Their Mindsets

The adoption of AI-powered security tools is now widespread, as 91% of organizations are using or experimenting with these solutions. These tools support security professionals by increasing operational efficiency, which 84% of respondents cite as a primary benefit. However, the technology is a double-edged sword. Cybercriminals utilize the same advanced technologies to launch sophisticated attacks, and 44% of defenders identify AI-driven cybercrime as a top concern.

To address these challenges, organizations are shifting their focus toward upskilling the existing workforce and seeking talent from underutilized pools. The willingness to fund professional certifications has increased significantly. In Fortinet’s 2026 Cybersecurity Skills Gap report,73% of respondents were willing to pay for certifications, while that number has risen to 92% in 2026. This trend reflects the difficulty of recruiting external talent with specific experience in AI, a challenge reported by 60% of organizations.

Corporate initiatives to bridge the gap include:

• Implementing internships, apprenticeships, and partnerships to identify new talent, a strategy used by 92% of organizations.
• Setting formal hiring targets for underrepresented groups, which 71% of respondents now utilize.
• Developing internal training and reskilling programs to support the adoption of AI, practiced by 59% of corporations.

Specific skill sets are in high demand to support the transition to AI-enhanced security. Organizations require staff proficient in AI model development, AI tool oversight, and security automation. To fulfill these needs, 52% of companies are procuring training from industry vendors.

Business resilience in 2026 requires a coordinated, layered approach that integrates people, processes, and technology. Fortinet suggests that organizations must continue to expand access to targeted training and deploy advanced security technologies to maintain a competitive defense. 

The Fortinet Training Institute remains a significant contributor to this effort, offering broad training programs to create new career opportunities. The organization is on track to train 1 million people in cybersecurity globally this year, continuing a pledge that began in 2022.

The findings of this report are based on a global survey of 2,750 decision-makers across 32 countries. The respondents represent various sectors, including technology, manufacturing, and financial services. As the threat landscape evolves, the data suggests that the ability to attract, retain, and upskill cybersecurity talent will be the determining factor in organizational stability.

For the enterprise to remain secure, boards of directors must transition from passive awareness to active investment in the human capital that manages their digital defense. The reliance on technology alone is insufficient without the expert oversight required to govern its use. Organizations that fail to address the skills gap may face continuing financial losses and executive turnover as cybercriminals continue to weaponize emerging technologies.