What Are The Effects Of The UK Cybersecurity Skills Shortage?

Recruitment company Robert Half reported that 45% of UK employers intend to grow their permanent IT and technology teams before the end of 2025. Another 36% are turning to contract professionals to fill urgent positions. Cybersecurity is the strongest driver, with 48% of employers placing it at the top of their hiring needs.

Machine learning and IT infrastructure also are a big part of recruitment plans. Robert Half found that 42% of businesses want machine learning expertise, while 38% are looking at infrastructure and 36% at IT support. In all these areas, demand is outpacing supply, which is putting pressure on salaries.

44% of employers believe cybersecurity experts will only be attracted through higher pay. This implies that there’s growing competition for skilled staff as businesses move quickly to secure their systems against growing threats.

 

What Does The National Survey Show About Breaches?

 

The Cyber Security Breaches Survey 2025, carried out for the Department for Science, Innovation and Technology and the Home Office, found that 43% of UK businesses and 30% of charities experienced a cyber attack in the last year. This equals around 612,000 businesses and 61,000 charities.

Phishing continues to be the most common form, hitting 85% of affected businesses and 86% of charities. Interview feedback in the survey showed that phishing remains time consuming due to the volume of cases and the need for staff training. It also noted that AI impersonation is becoming mainstream, making attacks harder to detect.

The survey estimated the average cost of the most disruptive breach at £1,600 for businesses and £3,240 for charities. Excluding those who said the cost was £0, the numbers go up to £3,550 for businesses and £8,690 for charities.

 

 

How Are Organisations Responding?

 

Large businesses lead on staff training, with 76% running awareness programmes compared to 19% of businesses overall. Adoption of advanced measures is less common, with 2FA at 40% of businesses and 35% of charities.

The report also shows that only 27% of businesses have a board member responsible for cybersecurity, a decrease from 38% in 2021.

Small businesses improved in some areas, with 62% now holding cyber insurance, compared to 49% in 2024, and 48% carrying out risk assessments compared to 41%. These measures show progress, though they leave gaps when set against the scale of attacks across the UK.

Craig Freedberg, Regional Director at Robert Half, said, “It is clear that UK businesses are taking a proactive approach to building out their IT and technology teams. However, the challenge lies in sourcing the right talent in what remains a very competitive market.

“Cybersecurity is no longer just a technical concern, it is a business-critical priority and organisations are willing to pay a premium to secure the expertise they need as threats continue to grow. With widespread reports of brands facing significant repercussions from cyber attacks, demand will remain strong even as businesses face pressure on resources.

“At the same time, the rapid rise of machine learning and AI is driving new demand for specialist skills that are still in short supply. For many employers, this creates a dual challenge: competing for scarce expertise while also needing to plan for the longer-term evolution of these technologies.

“Adding to this complexity, businesses are navigating challenging macroeconomic conditions and rising employment costs in the UK which can make investment decisions even more difficult. To stay ahead, employers will need to look beyond traditional hiring strategies and consider upskilling, reskilling and tapping into new talent pools.

“As we move into the final quarter of the year, businesses should use this period not only to reassess their tech capabilities and strengthen hiring strategies, but also to prepare for navigating an increasingly complex and challenging digital landscape.”