Nearly every organization in the Philippines experienced at least one cybersecurity breach over the past 12 months, with the persistent shortage of cybersecurity skills once again ranking as the leading cause, according to cybersecurity firm Fortinet's 2026 Global Cybersecurity Skills Gap Report, released on Thursday. The findings echo a well-documented global challenge, with industry estimates placing the worldwide cybersecurity workforce shortfall in the millions.

The report found that 93% of surveyed Philippine organizations suffered one or more breaches in the past year. More than half of those organizations — 52% — reported that the attacks incurred costs exceeding $1 million. Additionally, 70% of respondents said they needed more than a month to fully recover from a cyberattack.

For the third consecutive year, the lack of cybersecurity skills was identified as the top cause of breaches, cited by 71% of respondents.

The demand for experienced cybersecurity professionals remains strong, with 63% of respondents saying they need senior-level talent. However, 55% reported difficulties in securing approval to hire additional cybersecurity staff.

The consequences of inadequate cybersecurity preparedness extend to senior leadership. According to the report, 58% of organizations said executives and board members faced penalties following cyberattacks, underscoring the escalating business and governance risks tied to weak cyber defenses. Such accountability operates against the backdrop of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173), which established the National Privacy Commission and data protection obligations for organizations handling personal information.

"AI is fundamentally changing how organizations defend against cyber threats, but it is also changing the skills security teams need to succeed," Veronica "Bambi" Escalante, country manager of Fortinet Philippines, said in a statement.

"As organizations across the Philippines accelerate AI adoption, developing cybersecurity talent with expertise in AI, automation, and governance has become just as important as investing in new technologies," she added.

Ms. Escalante emphasized that strengthening cyber resilience demands a long-term commitment to people, continuous learning, and building the capabilities required to address both current and emerging threats.

The report also highlighted growing awareness of AI-related risks at the board level. Sixty-five percent of Philippine respondents said their board members are fully aware of the potential risks tied to employees' use of AI. Meanwhile, 78% expect organizations will need more AI oversight and governance roles within their cybersecurity teams over the next three years.

Organizations are stepping up investments in cybersecurity talent. Ninety-six percent of respondents said they prefer certified cybersecurity professionals, up from 82% last year. Furthermore, 98% indicated they are likely to invest in AI-related cybersecurity training or certifications within the next 12 months.

Adoption of AI-powered cybersecurity tools is also widespread. The survey showed that 94% of respondents are either using or experimenting with such technologies, and 91% reported that these tools have improved the efficiency of their IT and cybersecurity teams.

The 2026 Global Cybersecurity Skills Gap Report is based on a survey of 60 IT and cybersecurity decision-makers across various industries in the Philippines, including technology, manufacturing, and financial services.

— Edg Adrian A. Eva