ISC2

63% of cybersecurity professionals who use AI spend more time reviewing or validating AI outputs.

Cybersecurity professionals experiencing increased AI-related stress spend additional time reviewing or validating AI outputs at 74%, compared with 57% for those reporting decreased stress.

53% of cybersecurity professionals believe AI is creating new entry-level opportunities.

44% of enterprises identify security analysis as a top training priority.

98% of security leaders at enterprises say professional development is allowed during work hours.

73% of security leaders report their enterprise's cybersecurity training budget has increased over the past 12 months.

41% of people working in cybersecurity roles somewhat agree that previous leadership experience during a high-profile cybersecurity incident bolsters a leader's credibility.

31% of people working in cybersecurity roles express moderate confidence in current cybersecurity upper leadership.

15% of people working in cybersecurity roles are only slightly confident in current cybersecurity upper leadership.

In 2025, 28% of cybersecurity professionals reported having already integrated AI tools into their operations.

88% of cybersecurity professionals have experienced at least one significant cybersecurity consequence in their organizations due to a skills shortage.

In 2025, 33% of cybersecurity professionals stated their organizations do not have the resources to adequately staff their teams.

31% of cybersecurity professionals believe that AI will create new types of entry- and junior-level roles or increase demand.

The smallest organizations are among the most conservative when it comes to adopting AI tools, with 23% reporting no plans to evaluate AI security tools.

Mid-to-large (2,500–9,999 employees) and smaller (100–499 employees) organizations each have 33% adoption rates of AI tools.

54% of cybersecurity hiring managers have passed on candidates due to their social media activity

53% of cybersecurity hiring managers expect junior-level cybersecurity professionals to handle Backup, Recovery and Business Continuity.

30% of cybersecurity hiring managers expect entry-level cybersecurity professionals to handle Physical Access Controls.

10% of cybersecurity professionals report ambiguity in accountability when AI recommendations are incorrect.

48% of cybersecurity professionals report spending less time on tasks that do not involve AI over the past year.

62% of cybersecurity professionals do not believe AI has reduced the need for foundational cybersecurity skills, compared to 26% who say it has.

82% of cybersecurity professionals say it is very important to establish when to trust AI outputs.

48% of cybersecurity professionals say AI makes them feel more optimistic about their long-term career prospects.

61% of cybersecurity professionals list undetected errors scaling across systems as a top concern.

32% of cybersecurity professionals say AI has increased workplace stress.

80% of cybersecurity professionals say knowing when to override AI decisions is very important.

89% of cybersecurity professionals report having experienced AI recommendations that lead to incorrect outcomes at their organizations.

56% of cybersecurity professionals say AI has reduced the need for entry-level roles.

80% of cybersecurity professionals say having clear governance frameworks in place for AI is very important.

65% of cybersecurity professionals who use AI spend more time deciding when to trust or act on AI-generated recommendations.

48% of cybersecurity professionals report that AI has reduced workplace stress.

50% of cybersecurity professionals say their organizations hold human decision-makers ultimately accountable when AI-recommended actions lead to incorrect outcomes.

62% of cybersecurity professionals list over-reliance on AI as a top concern.

56% of cybersecurity professionals list reduced human judgment at critical decision points as a top concern.

8% of cybersecurity professionals report a lack of clear ownership when AI recommendations are incorrect.

21% of cybersecurity professionals say accountability varies depending on the severity of the issue when AI recommendations are incorrect.

Cybersecurity professionals experiencing increased AI-related stress spend additional time deciding when to trust AI-generated recommendations at 76%, compared with 57% for those reporting decreased stress.

94% of security leaders at enterprises feel they are keeping up or are ahead of the curve in adapting training to emerging technologies and shifting security requirements.

44% of enterprises identify cloud computing security as a top training priority.

40% of enterprises identify security administration as a top training priority.

77% of enterprises use a mix of in‑house and third‑party providers for cybersecurity workforce development.

70% of enterprises say training is customized by job role rather than standardized one‑size‑fits‑all programs.

86% of security leaders at enterprises say their training programs effectively address changing skills needs.

47% of security leaders at enterprises say AI is the most pressing skill their organization is addressing or planning to address through cybersecurity training.

40% of enterprises identify risk assessment and management as a top training priority.

53% of cybersecurity leaders at enterprises cite time and scheduling constraints as the primary barrier to effective training.

86% of people working in cybersecurity roles mark being transparent about decisions and actions as very important in a cybersecurity leader.

75% of people working in cybersecurity roles mark technical cybersecurity expertise as very important in a cybersecurity leader.

18% of people working in cybersecurity roles prefer strategic and executive leadership experience over hands-on technical incident experience in a cybersecurity leader.

11% of people working in cybersecurity roles prefer hands-on technical incident experience over strategic and executive leadership experience in a cybersecurity leader.