Cybersecurity Skills Gap Widens as Global Threats Increase

Industry reports and summit statements in 2026 highlight a growing gap between the demand for cybersecurity professionals and the available workforce, amid rising cyber threats and financial losses worldwide.

During the Kerala Cyber Suraksha Summit 2026 in Kochi, DGP and Vigilance Director Manoj Abraham stated that 4.8 million cybersecurity positions remain unfilled globally. This figure aligns with estimates from the 2025 Global Cybersecurity Outlook report, which identified a shortfall of between 2.8 million and 4.8 million professionals needed to address current security challenges.

Manoj Abraham also said that ransomware incidents worldwide increased by 389% year-over-year. He noted that India experienced financial losses from cyber fraud totaling ₹19,813 crore in 2025, reflecting the scale of the threat environment facing organizations and individuals.

According to a June 2026 analysis by Accenture, 59% of cybersecurity job postings require a combination of technical and strategic business skills. However, only 40% of the workforce meets these criteria, indicating a mismatch between employer needs and available expertise.

What the numbers show

• 4.8 million global cybersecurity jobs remain unfilled.
• Ransomware victims increased by 389% year-over-year.
• India’s cyber fraud losses in 2025 reached ₹19,813 crore.
• 59% of open roles require both technical and strategic skills.
• Only 40% of the workforce matches these skill requirements.

The 2026 SANS | GIAC Cybersecurity Workforce Report found that 60% of organizations believe their teams do not possess the necessary skills to counter current cyber threats. The report also indicated that skills gaps have become a greater workforce challenge than shortages in headcount.

Further data from the SANS report documented that 27% of organizations experienced security breaches directly linked to gaps in workforce capability. This suggests that the lack of appropriate skills within teams has a measurable impact on organizational security.

At the Kerala summit, Manoj Abraham stated that modern cyberattacks have the potential to disrupt critical infrastructure and military operations without physical conflict. His remarks underscored the strategic risks associated with insufficient cybersecurity expertise at both national and organizational levels.

Industry analyses from multiple sources indicate that the skills gap is not limited to technical abilities, but also includes the need for professionals who can integrate business strategy with cybersecurity practices. Reports consistently show that organizations are seeking candidates with a broader range of competencies to address evolving threats.

* This article is based on publicly available information at the time of writing.