Artificial intelligence (AI) skillsets are critical to address the cyber security skills gap in India, according to the latest 2025 Global Cybersecurity Skills Gap Report by Fortinet. The cybersecurity skills shortage is a key contributor to increased breaches. 54% of the surveyed respondents indicated a lack of IT security skills and training as one of the leading causes of breaches in their organisations.
As organisations are turning increasingly to AI to strengthen their security postures and fill gaps, they also acknowledge that AI may be used against them as an engine of new or improved cyberattacks, especially given the lack of AI skillsets across teams.
- Lack of cybersecurity awareness and training remains the top cause of breaches.
- Boards lack cyber knowledge, despite it being a priority.
- Organisations want cybersecurity personnel with certifications.
“This year’s survey further underscores the urgent need to invest in cybersecurity talent,” said Vivek Srivastava, Country Manager, India & SAARC at Fortinet. “Without closing the skills gap, organizations will continue to face rising breach rates and escalating costs. The findings highlight an inflection point for both public and private sectors: Without bold action to build and retain cybersecurity expertise, the risks and costs will only continue to grow for our society.”
As cyberthreats continue to escalate, organisations face the reality that security attacks are not just a possibility but a certainty. At the same time, an estimated global shortfall of more than 4.7 million skilled professionals leads to critical security roles being unfilled at a time when they are needed most.
The volume of breaches organisations experience is increasing year over year. According to the 2025 Fortinet Global Skills Gap Report, 92% of Indian organisations experienced at least one cyber breach in 2024, with nearly one-third (34%) reporting five or more. The figures were marginally higher in 2021, when the inaugural Fortinet Global Skills Gap Report was released, in which 96% of organisations reported breaches, and 44% faced five or more.
Financial ramifications of breaches remain significant. More than half (60%) of surveyed organisations say cyber incidents cost them over $1 million in 2024, consistent with the prior year’s findings and sharply up from 38% in 2021.
AI could ease strain on security teams, but lack of expertise a growing risk
While AI offers critical relief amid ongoing cyber skills shortages, organizations may not yet be fully prepared to harness its potential securely. This year’s survey found:
• Security technology with AI capabilities has been widely adopted. All of the organisations surveyed are either already using or plan to implement AI-enabled cybersecurity solutions, with threat detection and prevention cited as the top areas of interest for applying AI in cybersecurity.
• AI can help alleviate the burden on short-staffed security teams. 82% of cybersecurity professionals expect AI to enhance their roles, rather than replace them, offering efficiency and relief amid skills shortages.
• While AI can help security teams, teams lack AI skillsets to unlock the technology’s full potential. A majority of those surveyed (90%) say AI is helping their IT and security teams become more effective, but half (52%) of IT decision makers point to a lack of staff with sufficient AI expertise as the biggest challenge to successful implementation. 70% of organisations that suffered nine or more cyberattacks in 2024 had AI tools in place, suggesting that adoption alone isn't enough without the right expertise.
Upskilling remains a focus in addressing the skill gap. Certifications continue to be highly valued by employers. 98% of IT decision-makers prefer to hire candidates who hold certifications. Most respondents said certifications validate cybersecurity knowledge (61%), demonstrate an ability to stay current in a fast-evolving field (65%), and indicate familiarity with key vendor tools (61%).
Organisational support for funding certifications has declined. Only 82% of respondents now say they are willing to pay for employees to obtain certifications, down from 92% in 2023.
The 2025 Cybersecurity Skills Gap Report makes clear that cybersecurity has become a board-level priority, driven by the rise of AI and the escalating risks to business operations. Closing the Indian skills gap remains essential. Organisations must rethink hiring practices, tap into underutilised talent pools, and invest in training and upskilling to build and retain the expertise they need. This requires a coordinated approach grounded in three key pillars: raising awareness and education, expanding access to targeted training and certification, and embracing advanced security technologies.