Some companies have been forced to hire underqualified and inexperienced people to fill cybersecurity roles. That’s just how bad the situation with cybersecurity industry skills shortages is.
2025 has been better for the industry compared to 2024. The spree of layoffs and hiring freezes has somewhat come to an end.
“Figures are beginning to level off rather than significantly diminishing, intimating the economic drivers that are forcing caution on spending to remain, adding pressure on existing cybersecurity teams. Many in the cybersecurity workforce are worried that economic austerity will harm the security resilience of the organizations in which they work,” the newly released 2025 ISC2 Cybersecurity Workforce Study reads.
However, budget concerns that were so prevalent last year have already had a lasting impact. Companies essentially froze hiring and investment in skills, resulting in a competency deficit. In turn, this causes trouble keeping up, which may lead to various incidents, such as data breaches and data leaks.
“Organizations must find ways to widen their skills base and talent pools — including investing in existing personnel through multiskilling and skills investment — despite budgetary constraints, to bolster cybersecurity capability and meet demand,” the study, based on responses of 16,029 cybersecurity practitioners and decision-makers, reads.
It seems that the industry is advocating the need for critical skills within the workforce over the need to increase headcount.
Due to the staffing and skills shortage, over a quarter of respondents reported experiencing oversights in their cybersecurity processes and procedures. Another quarter reported that they were forced to hire underqualified or inexperienced individuals.
So, what skills does the industry lack the most?
Unsurprisingly, artificial intelligence (AI) was the most frequently mentioned skill among the respondents.
According to the report, cybersecurity professionals view AI as a catalyst for their career development, rather than a threat, with many actively educating themselves on the use of AI.
The most highly-ranked AI-specific skill is the ability to use it in threat detection and response.
Another most wanted skill is cloud computing security. Being at the top is also no surprise, as cloud security “has long existed as a major skills need for cybersecurity professionals and their employer organizations.”
The highest-ranked skill in cloud computing is cloud architecture and secure design.
Over the past several years, nontechnical skills have become just as important as technical ones, with problem-solving, collaboration, communications, willingness to learn, and strategic thinking skills being the top five wanted competencies.
Unlock exclusive Cybernews content on YouTube
Your email address will not be published. Required fields are markedmarked