TALKING POINT

A new Fortinet report surveys Singapore IT leaders and finds a perfect storm of talent shortages, board unpreparedness and rising AI-driven threats.

Key findings from the global survey include:

• The lack of cybersecurity skills – stemming in part from insufficient investment in cybersecurity talent – remains a top cause of devastating security breaches.

• Although cyber defenders are effectively leveraging AIpowered tools, upskilling and reskilling are necessary to fully reap the benefits from these advanced technologies.

• Despite gaps in investment, intentional efforts are being made to attract and retain top-tier cybersecurity talent.

“ Cybersecurity is not simply a technical issue but a strategic business risk,” said Carl Windsor, CISO at Fortinet.“ This year’ s survey suggests that while boards generally recognise the importance of cybersecurity, more investment is needed to address key issues, such as emerging AI risks and the ongoing cybersecurity skills shortage. Addressing these issues is critical to business resilience in an increasingly complex threat landscape.”

Cybersecurity must be prioritised

A lack of cybersecurity skills remains a top cause of devastating security breaches in enterprises. The Singapore survey revealed:

• 80 % of organisations report one or more breaches in the past 12 months. 66 % say breaches cost them more than US $ 1 million – up from 43 % in 2021. Breaches cost most in Singapore, with US $ 2.3 million being the average.

• For the third consecutive year, IT leaders cited a lack of cybersecurity skills as a top cause of security breaches( 64 %). Half( 50 %) say they mostly need senior-level cybersecurity skills, yet 58 % struggle to get approval for additional cybersecurity talent. This is surprising as 44 % say executives and even Board members have faced penalties after a cyberattack, underscoring the risk.

Employees’ use of AI creates new cybersecurity challenges that Boards fail to understand. The report revealed:

• Only 56 % of leaders believe their Board members are‘ fully aware’ of potential AI risks.

• 72 % expect more need for AI oversight and governance roles on cybersecurity teams over the next three years.

Despite investment gaps, investment in certifications is up yearover-year( YoY). Findings from the report demonstrated:

• Willingness to pay for certifications is up: 94 % revealed they would pay for an employee to get certified, up from 88 % of respondents in the 2025 report.

• Dedicated initiatives to identify and nurture talent: To source talent from underrepresented groups, 92 % use internships, apprenticeships, partnerships and programs. Over half( 68 %) report formal hiring targets for underutilised talent pools.

AI for cybersecurity creates opportunities and challenges

AI-powered cybersecurity tool adoption is widespread as decision-makers see its potential to support cybersecurity teams with their operations. The findings revealed:

• 92 % of respondents are using or experimenting with AI-powered cybersecurity solutions. Scepticism or uncertainty about AI for cybersecurity is 36 %, down from 46 % in last year’ s report.

• 90 % say AI-enhanced security tools are helping IT and security teams be more effective and efficient. This is critical, as cyber defenders and cybercriminals are now equipped with the same technology; 44 % of respondents cited defending against AI cybersecurity attacks as a top concern.

AI is widening the cybersecurity skills gap. At the same time, there are multiple efforts to overcome it. Survey respondents cited:

• 58 % say their top recruiting challenge is finding cybersecurity talent with specific experience in AI. Today, 94 % are likely to invest in AI-related cybersecurity training or certifications in the next 12 months.

• Organisations say they require staff with new skillsets to support their adoption of AI, including: AI model development( 54 %), AI tool oversight( 46 %) and security automation( 56 %). 66 % of organisations are developing internal training or reskilling programmes to support AI adoption, while 62 % are procuring training or reskilling from industry vendors.

Organisations should continue tapping into underutilised talent pools and investing in training and upskilling to build and retain the expertise they need. This requires a coordinated approach grounded in three key pillars: raising awareness and education, expanding access to targeted training and certification and deploying advanced security technologies. •

18

INTELLIGENT CIO APAC www. intelligentcio. com