The Cybersecurity Talent Shortage Narrative Is Wrong. The Real Crisis Is Skills, and AI Just Rewrote the List.
https://uk.finance.yahoo.com/news/sans-research-cybersecurity-talent-shortage-110000178.html
Publish Date: 2026-03-31 07:00:00
Source Domain: uk.finance.yahoo.com
Third annual SANS | GIAC Cybersecurity Workforce Report surveyed ~1,000 global respondents and finds 60% of organizations say their teams lack the right skills to defend against today’s threats, while AI reshapes entry-level roles, regulatory hiring surges from 40% to 95%, and 27% of organizations report breaches directly tied to capability gaps
Bethesda, MD, March 31, 2026 (GLOBE NEWSWIRE) — The cybersecurity workforce has a bigger problem than headcount: the people already on the team don’t have the skills to match today’s threats. That is the tone of the central findings of the 2026 SANS | GIAC Cybersecurity Workforce Research Report, unveiled at RSAC 2026 by SANS Institute CEO James Lyne and Chief AI Officer & Chief of Research Rob T. Lee. Drawing on responses from almost 1,000 practitioners, leaders, and HR professionals across six global regions, the report reveals an industry at an inflection point: AI is automating the entry-level work that has historically trained cybersecurity’s next generation, regulatory compliance is forcing the most dramatic hiring overhaul in years, and the widening skills gap is producing real, measurable security failures.
For the first time in the report’s three-year history, skills gaps decisively overtook headcount shortages as the industry’s top workforce challenge. When asked to choose between “not having the right staff” and “not enough staff,” 60% of organizations identified skills gaps as the greater problem, compared to 40% citing staffing shortages. That 20-point gap has widened sharply from just four points a year ago, signaling a fundamental shift in how the industry defines its workforce crisis.
“This is no longer a story about filling seats,” said Rob T. Lee, SANS Chief AI Officer & Chief of Research. “Organizations have people. But those people are overwhelmed, under-resourced, and unable to develop the capabilities they need because they’re too busy running today’s operations. The…
