Logo
Cybersecurity

AI Is Raising the Bar for Cybersecurity Talent

AI can process alerts faster than people ever could. The harder part is knowing when its answer is wrong.

ITSEC AsiaITSEC Asia
|
Sep 02, 2026
AI Is Raising the Bar for Cybersecurity Talent

For cybersecurity teams, AI is quickly moving from something experimental to something people actually use.

The World Economic Forum’s Global Cybersecurity Outlook 2026 found that 77% of surveyed organizations had adopted AI for cybersecurity. It is already being used for tasks such as phishing detection, intrusion response and user-behaviour analysis.

That sounds like good news for teams struggling with workload. And mostly, it is.

But AI doesn’t remove the need for skilled cybersecurity professionals. It changes what those professionals need to be good at.

Automation Can Do More. So Humans Have to Do More Too.

The same WEF research found that 54% of organizations considered insufficient knowledge or skills a barrier to using AI effectively in cybersecurity. Another 41% pointed to the need for human oversight.

That second number matters.

AI can analyse enormous amounts of information quickly. What it still struggles with is context: whether an unusual event is genuinely dangerous, how a technical issue affects the business and what action makes sense when the available information is incomplete.

Cybersecurity professionals increasingly need to:

  • Validate AI-generated findings rather than accept them automatically
  • Recognise when an automated recommendation doesn’t fit the situation
  • Investigate activity across cloud, endpoint, identity and network environments
  • Connect technical findings with actual business risk
  • Make decisions when there isn’t a neat textbook answer

In other words, knowing how to use AI is becoming useful. Knowing when not to trust it may be even more useful.

Indonesia Is Facing the Same Shift

Komdigi has been making a similar point.

In August 2026, Vice Minister of Communication and Digital Affairs Nezar Patria said AI was changing both cyber defence and cybercrime. He warned that agentic AI could allow attacks to operate more autonomously while AI-assisted social engineering and deepfakes were becoming harder to recognise.

His response was not simply “use more technology.”

Komdigi has called for stronger AI-based cybersecurity talent, closer collaboration between universities and industry and a move toward security by design, where security becomes part of how systems are built rather than something added after problems appear.

That requires people who understand both the tools and the consequences of using them.

Training Has to Catch Up With the Job

The World Economic Forum ranks networks and cybersecurity among the three fastest-growing skills expected through 2030. It also argues that as AI takes over more repetitive security tasks, professionals will spend more time on oversight, governance and higher-level decision-making.

That changes what good cybersecurity training should look like.

Learning concepts still matters. Certifications still have a role. But professionals also need opportunities to investigate, test assumptions and make decisions in conditions that resemble actual operations.

That is the direction behind ITSEC Cyber & AI Academy, which combines cybersecurity learning with hands-on exercises and scenarios informed by ITSEC Asia’s operational experience.

The goal isn’t to train people to compete with AI at processing information faster.

Machines already have a fairly comfortable lead there.

The goal is to develop professionals who know what the information means and what to do next.

Explore practical cybersecurity and AI training at ITSEC Cyber & AI Academy.

Share this post

You may also like

How to Protect Your Personal Data: A Practical Guide for Individuals and Organizations
Cybersecurity

How to Protect Your Personal Data: A Practical Guide for Individuals and Organizations

Your personal data is more valuable than you might think, and cybercriminals know it. From your email address and phone number to your banking credentials and health records, every piece of information you share online can be stolen, sold, or weaponized against you. But here is the uncomfortable truth: most people underestimate how vulnerable they are, and most organizations still treat data protection as an afterthought rather than a priority. This guide breaks down exactly how personal data gets compromised, what the real-world consequences look like, and, most importantly, what you can do about it right now. According to the IBM Cost of a Data Breach Report 2025, the global average cost reached USD 4.4 million. Behind every statistic is a real person whose identity was stolen, whose bank account was drained, or whose private records were exposed to strangers. WHY PERSONAL DATA PROTECTION IS A GLOBAL EMERGENCY We are living through a data breach epidemic. Every week, news breaks about a new company, government agency, or institution that has

ITSEC AsiaITSEC Asia
|
Apr 27, 2026 — 8 minutes read
Why Cybersecurity Awareness Matters for Modern Enterprises
Cybersecurity

Why Cybersecurity Awareness Matters for Modern Enterprises

INTRODUCTION As organizations accelerate digital transformation through cloud adoption, remote work, and AI-driven systems, the nature of cyber risk continues to evolve. Security challenges are no longer limited to technical vulnerabilities alone. Increasingly, attackers exploit human behavior, trust, and routine workflows to gain unauthorized access to systems and sensitive data. Phishing campaigns, social engineering tactics, and impersonation attacks have grown more sophisticated and harder to detect. Industry guidance from ENISA [https://www.enisa.europa.eu/] highlights that human-centric attack techniques remain among the most effective methods used against organizations today. In this context, cybersecurity awareness has become a critical factor in determining how effectively enterprises can prevent, detect, and respond to cyber threats. This article explains why cybersecurity awareness is important, the challenges enterprises face in building it, and how awareness strengthens overall cybersecurity resilience. WHAT IS CYBERSECURITY AWARENESS? According to findings highlighted in the Verizon Data Breach Investigations Report (DBIR), [https://www.verizon.com/business/resources/reports/dbir/]human interaction continues to play a significant role in successful cyber incidents. In enterprise environments, cybersecurity awareness is not limited to IT or security teams. It applies to every

ITSEC AsiaITSEC Asia
|
Jan 19, 2026 — 4 minutes read
You Don’t Need to Be a Cryptographer to Start Preparing for Post Quantum Security
Cybersecurity

You Don’t Need to Be a Cryptographer to Start Preparing for Post Quantum Security

Ask a security team where the organization uses cryptography and the first answers will probably be obvious: TLS certificates, VPNs, encrypted databases and authentication systems. Then keep asking. What about APIs? Code signing? SSH? Embedded devices? Software libraries? Cloud services? Machine identities? Third party applications? The list gets longer rather quickly. That matters because NIST is now telling organizations to begin migrating toward post quantum cryptography. Its first three finalized PQC standards have been available since 2024, and NIST says products, services and protocols will need updates as organizations move away from quantum vulnerable public key algorithms. NIST [https://www.nist.gov/pqc?utm_source=chatgpt.com] The workforce problem starts before anyone changes an algorithm. FIRST, FIND THE CRYPTOGRAPHY NIST’s Migration to Post Quantum Cryptography project describes cryptographic inventory as a record of cryptography used across systems, applications, services, devices and data flows. It can include algorithms, protocols, keys, certificates and the components that depend on them. NIST Pages [https://pages.nist.gov/nccoe-migration-post-quantum-cryptography/?utm_source=chatgpt.com] Building that inventory requires more than a specialist who understands the mathematics behind ML-KEM or ML-DSA. Organizations need people who can: * Identify

ITSEC AsiaITSEC Asia
|
Sep 29, 2026 — 3 minutes read

Receive weekly
updates on new posts

Subscribe