Cyber budget cuts are slowing down, but that doesn't mean there's light on the horizon for security teams

"However, while budget cuts are slowing down, a continued lack of budget is still a key hurdle for security leaders, exacerbating long-running staff shortages. Around one-third (33%) of respondents to the ISC2 survey noted their organizations didn't have the resources to adequately staff their teams. Meanwhile, 29% said they couldn't afford to hire staff with the skills they need to adequately secure their organizations. As a result, 72% agreed that reducing security personnel significantly increases the risk of a breach in their organizations."

"Crucially, it's a shortage of skilled personnel, rather than mere numbers, that's really giving security professionals headaches. Nearly nine-in-ten said they'd experienced at least one significant cybersecurity-related consequence in their organization because of skills shortages, while 69% said they'd experienced more than one. An overwhelming 95% of respondents said they had at least one skill need - up 5% from 2024 - and 59% cited critical or significant skills needs, up 15% from last year."

Budget cuts fell to 36% and layoffs dropped to 24%, signaling that economic pressures on cybersecurity teams are leveling off. A continued lack of budget remains a major constraint, with about 33% lacking resources to staff teams adequately and 29% unable to afford hires with necessary skills. Skills shortages, rather than sheer headcount, are driving security consequences: nearly nine-in-ten experienced at least one cybersecurity-related impact and 69% experienced multiple impacts. Overall, 95% reported at least one skill need and 59% reported critical or significant skill gaps. Increased adoption of generative AI is expected to create more specialized and strategic cybersecurity skills.

Read at IT Pro