Logo
Cybersecurity

Indonesia Is Buying More Cybersecurity Technology. Are Its People Ready?

As AI, cloud and security automation reshape the threat environment, Indonesia faces a growing gap between the technology organizations deploy and the skills needed to secure it.

ITSEC AsiaITSEC Asia
|
Agt 27, 2026
Indonesia Is Buying More Cybersecurity Technology. Are Its People Ready?

Indonesia is investing more in cybersecurity technology as businesses move deeper into cloud computing, AI and digital services. Security platforms are becoming more sophisticated, but the people operating them have to keep pace.

That gap is becoming harder to ignore.

The 2025 ISC2 Cybersecurity Workforce Study found that 95% of cybersecurity professionals reported at least one skills need within their organizations. AI was identified as the top skills gap at 41%, followed by cloud security at 36%.

The issue, then, isn't simply a shortage of cybersecurity professionals. It's a shortage of people with the specific skills needed to secure increasingly complex technology.

New Technology Creates New Security Skills

A company moving its infrastructure to the cloud needs professionals who understand cloud architecture, identity and access management and cloud-specific vulnerabilities.

An organization adopting AI needs people who understand how AI systems can be secured and how attackers can exploit them.

A security team deploying more automated tools still needs analysts who can investigate alerts and distinguish a genuine attack from a false positive.

The skills organizations increasingly need include:

  • AI and AI security
  • Cloud security
  • Penetration testing
  • Threat detection and incident response
  • Security operations
  • Application and API security

The World Economic Forum's Global Cybersecurity Outlook 2026 found that 87% of respondents identified AI-related vulnerabilities as the fastest-growing cyber risk during 2025.

As AI adoption accelerates, cybersecurity professionals are being asked to understand both sides of the technology: how it can improve defense and how it can create new attack opportunities.

Security Technology Can't Make Every Decision

More security tools can improve visibility, but they don't eliminate the need for expertise.

A vulnerability scanner can identify hundreds of findings. A security professional still needs to determine which vulnerabilities are exploitable, which systems are exposed and which issues require immediate action.

A SIEM can generate thousands of alerts. Someone still needs to investigate them, understand the context and determine whether an organization is actually under attack.

AI can help accelerate these processes, but human judgment remains part of the security equation.

Technology can provide:

  • Security alerts
  • Vulnerability findings
  • Threat intelligence
  • Automated analysis
  • Automated responses

Cybersecurity professionals provide:

  • Investigation
  • Context
  • Risk assessment
  • Prioritization
  • Decision-making

The 2026 Fortinet Cybersecurity Skills Gap Report found that 71% of organizations believe the cybersecurity skills gap creates additional risk.

That makes skills a direct part of an organization's security posture.

The Training Gap Matters Too

Cybersecurity education needs to keep pace with the systems professionals are actually expected to protect.

Learning security concepts is necessary, but professionals also need practical experience. They need to understand what happens when a vulnerability is discovered, how an incident develops and how different security technologies work together.

Practical cybersecurity training should give people experience with:

  • Penetration testing and vulnerability assessment
  • Incident investigation and response
  • Security operations
  • Cloud security
  • AI security
  • Realistic attack and defense scenarios

This matters for both experienced professionals and people entering the cybersecurity industry. As technology changes, continuous skills development becomes part of the job rather than a one-time step at the beginning of a career.

Building the Skills Behind Indonesia's Cybersecurity Technology

Indonesia's cybersecurity investment will continue to grow. But technology alone can't close the security gap.

Organizations need people who understand how to configure, operate and challenge the systems they deploy. They need professionals who can work across cybersecurity and emerging technologies rather than treating them as separate disciplines.

That's the thinking behind the ITSEC Cyber & AI Academy.

The Academy brings cybersecurity and AI education together with a practical focus, helping professionals and aspiring cybersecurity talent develop skills aligned with the technologies and threats shaping the industry.

For Indonesia, the next challenge isn't simply buying better cybersecurity technology.

It's building the people who know how to use it.

Build the skills behind the technology.

Explore the ITSEC Cyber & AI Academy and develop practical cybersecurity and AI capabilities for the next generation of digital threats.

Visit ITSEC Cyber & AI Academy

Share this post

You may also like

Top Five Cybersecurity Threats to Small Business Owners
Cybersecurity

Top Five Cybersecurity Threats to Small Business Owners

According to a recent Verizon Data Breach Investigations Report, over the past two years, small and medium-sized businesses have become the primary target of cybercriminals, and they are now more affected by cyber breaches than large-scale businesses. Cyberattacks on SMEs have increased because cybercriminals have predicted that small and medium-sized enterprises have fewer resources to dedicate to their security. Most SMEs lack dedicated security professionals, and they are too small to afford them. This makes them vulnerable and easy targets for cybercriminals. In this context, neglecting security is no longer an option, and the assumption that your business is too small to attract the interest of cybercriminals is unrealistic. TOP FIVE CYBER THREATS AFFECTING SMALL AND MEDIUM-SIZED ENTERPRISES Incompatible Operating Systems and Software: Ensure that your computers and the software running on them are up to date. This is crucial and forms a solid foundation for good security practices. Hackers exploit vulnerabilities in outdated software and operating systems, often infiltrating organizations. Failing to apply software and operating system updates when they

ITSEC AsiaITSEC Asia
|
Jul 20, 2023 — 5 minutes read
Your SOC Can’t Handle a Cyber Crisis Alone
Cybersecurity

Your SOC Can’t Handle a Cyber Crisis Alone

Imagine a ransomware incident at 10:30 on a Tuesday morning. The SOC detects suspicious activity and starts investigating. Soon IT needs to isolate systems. Management wants to know whether operations should continue. Legal needs facts. Communications may need to prepare a response. Someone has to decide whether customers or authorities need to be informed. By lunch, cybersecurity has become an organizational exercise. That reality is reflected in current training from the International Telecommunication Union. An ITU Academy incident response course currently open for applications uses three scenarios: a ransomware attack, a data breach and an attack affecting a national education system. Participants work through the incident response lifecycle using collaborative tabletop exercises. The lesson is useful far beyond education. Incident response capability depends on how well different people can make decisions together. TECHNICAL SKILL IS ONLY ONE LAYER A strong SOC can identify malicious activity, analyse evidence and recommend containment. It still needs an organization around it that knows what happens next. Useful incident response capability therefore spreads across several functions: *

ITSEC AsiaITSEC Asia
|
Sep 15, 2026 — 3 minutes read
AI Can Speed Up Cybersecurity. It Can't Replace Technical Judgment.
Cybersecurity

AI Can Speed Up Cybersecurity. It Can't Replace Technical Judgment.

AI can summarize a security alert in seconds, help analysts investigate suspicious activity and reduce time spent on repetitive tasks. That is useful, especially for teams dealing with more alerts than they have hours in the day. But faster analysis is only valuable if someone can recognize when the result is wrong. A recent UK government study offers a reason to look carefully at that balance. Published on 29 September 2026, Cyber Security Skills in the UK Labour Market 2026 found that 57% of businesses had a basic technical cybersecurity skills gap, up from 49% in the previous study. The report also found that 47% of people responsible for cybersecurity in businesses and charities lacked confidence in dealing with cyberattacks and had not outsourced the function. Meanwhile, 70% of cybersecurity businesses said staff were using AI in their daily work, compared with 53% in the previous study. GOV.UK [https://www.gov.uk/government/publications/cyber-security-skills-in-the-uk-labour-market-2026/cyber-security-skills-in-the-uk-labour-market-2026?trk=public_post_comment-text] The findings describe the UK market, but they raise a question relevant to any organization adopting AI: are teams building the

ITSEC AsiaITSEC Asia
|
Okt 14, 2026 — 3 minutes read

Receive weekly
updates on new posts

Subscribe