Organizations spend approximately $200 billion annually on cybersecurity products and services, but they struggle to fill positions, resulting in a 28% vacancy rate. This shortage is particularly pronounced in the Asia-Pacific region, which accounts for over half of the global gap, with 2.8 million jobs remaining unfilled.

Four industries—financial services, materials and industrials, consumer goods, and technology—account for nearly two-thirds of the cybersecurity workforce shortage. These sectors are frequent targets of cyberattacks, with seven out of ten attacks directed at them, leading to high costs per breach.

To address the talent and skills gap, organizations should adopt future-ready workforce practices. This includes mapping skills training to current threats, offering upskilling opportunities, creating clearer career paths, attracting diverse talent, and collaborating with government agencies to promote cybersecurity as a viable career choice.