57% of UK companies deficient in basic cybersecurity skills

The Department for Digital, Culture, Media and Sport (DCMS) and the now-defunct Department for Science, Innovation and Technology (DSIT) have published their latest research into the UK cyber security labour market. The 2026 Cyber Security Skills in the UK Labour Market Report, its eighth consecutive annual update, provides insight into the nature and extent of cybersecurity skills gaps and shortages.

Conducted by Ipsos and Perspective Economics, the research finds that workforce expansion is slowing, with the sector growing by just 2% to approximately 145,900 individuals. Recruitment appetite has also softened in 2025, with only 53% of cyber companies expecting growth in 2026. However, demand showed signs of recovery from 2024 lows, with a 7% rise in core security vacancies and a 10% increase across all security-related postings.

Against this backdrop, skills shortages have increased, with 57% of businesses facing a basic technical deficit, rising from 49% in 2025. Furthermore, 47% of individuals overseeing cybersecurity lacked confidence in handling data breaches or cyberattacks without outsourced support. Meanwhile, AI adoption is accelerating, with 70% of cyber businesses reporting staff using AI daily.

Training Announcement: The BCS Foundation Certificate in Information Security Management Principles (CISMP) is an entry-level programme aligned with ISO/IEC 27001 and Cyber Essentials that examines the fundamental concepts, technologies and principles of information security management. It provides attendees with practical knowledge of key concepts and techniques in risk management, security operations, and technical, physical, and environmental security. In addition, CISMP addresses legal and regulatory requirements, business continuity and disaster recovery planning, and emerging technologies. Find out more.