A new industry report highlights the growing impact of the cybersecurity skills gap on Saudi organizations, with 86% experiencing at least one cyber breach in 2024. The findings come as the Kingdom accelerates digital transformation initiatives under Vision 2030, creating urgent demand for cybersecurity professionals that far outpaces local supply.
According to Fortinet’s 2025 Global Cybersecurity Skills Gap Report, which surveyed over 1,850 IT decision-makers across 29 countries, nearly one-third of organizations globally reported five or more breaches last year. The data represents a significant increase from 2021, when 80% reported breaches and only 19% faced five or more incidents.
Key Takeaways
- 86% of surveyed organizations experienced cyberattacks in 2024, up from 80% in 2021
- Global shortage of 4.7 million cybersecurity professionals leaves critical roles unfilled
- 54% cite lack of IT security skills as a leading cause of breaches
- 97% plan to implement AI-enabled cybersecurity solutions, but 48% lack AI expertise
- Saudi Arabia’s Vision 2030 digital transformation intensifies need for local talent development
Skills Shortage Directly Linked to Rising Breach Costs
More than half of surveyed organizations reported cyber incidents costing over $1 million in 2024. However, 54% of respondents identified lack of IT security training as one of the primary causes of breaches in their organizations.
“Without closing the skills gap, organizations will continue to face rising breach rates and escalating costs,” said Carl Windsor, CISO at Fortinet, in a statement accompanying the report release.
The financial impact remains consistent with previous years but sharply elevated compared to 2021, when only 38% reported breach costs exceeding $1 million.
Saudi Arabia’s Digital Transformation Amplifies Talent Demands
In Saudi Arabia, the cybersecurity skills gap poses particular challenges as the Kingdom expands cloud adoption, e-government services, and smart city projects. The National Cybersecurity Authority (NCA) has prioritized local talent development, but demand continues to exceed available workforce capacity.
Government and financial services sectors face elevated risk as high-value targets. Additionally, Saudi organizations report increasing incidents involving identity fraud, phishing, and AI-driven attacks. Regulatory frameworks such as the Essential Cybersecurity Controls (ECC) mandate stronger cyber resilience measures.
“While AI is essential to enhancing cyber defense, the Kingdom must prioritize upskilling the cybersecurity workforce to fully realize its benefits,” said Sami Alshwairakh, Senior Regional Director Sales at Fortinet, noting that initiatives like the Saudi Cybersecurity Workforce Development Program are addressing the challenge.
AI Adoption Outpaces Expertise Development
The report found that 97% of surveyed organizations either use or plan to implement AI-enabled cybersecurity solutions, with threat detection and prevention as top priorities. However, 48% of IT decision-makers identified lack of staff with AI expertise as the biggest implementation challenge.
Furthermore, 87% of cybersecurity professionals expect AI to enhance rather than replace their roles. Yet the data suggests technology alone cannot compensate for skills gapsβ76% of organizations that suffered nine or more cyberattacks in 2024 already had AI tools deployed.
Board-level awareness of AI-related risks lags behind adoption rates. Only 49% of respondents indicated their boards fully understand the risks posed by AI use in their organizations.
Certification Demand Remains High Despite Reduced Employer Support
Organizations continue to value professional certifications, with 89% of IT decision-makers preferring candidates who hold them. Respondents cited certifications as validation of cybersecurity knowledge (67%), demonstration of ability to stay current (61%), and familiarity with vendor tools (56%).
However, employer willingness to fund certifications has declined significantly. Only 73% now say they will pay for employee certifications, down from 89% in 2023.
National initiatives including the Saudi Digital Academy and partnerships with global technology firms aim to close the talent gap through subsidized professional certifications and upskilling programs.
What’s Next
The report emphasizes that addressing the cybersecurity skills gap requires coordinated action across three areas: raising awareness and education, expanding access to training and certification, and embracing advanced security technologies.
As Saudi Arabia continues building digital infrastructure under Vision 2030, the ability to develop and retain cybersecurity expertise will directly impact the Kingdom’s economic transformation and national security objectives.
