According to the Cisco Cybersecurity Readiness Index, only 7% of Thai organizations have reached a “Mature” level of cybersecurity readiness, down from 9% last year. This decline underscores significant vulnerabilities amid the growing complexity of AI-driven threats.
Key Points
- Only 7% of Thai organizations are at a “Mature” cybersecurity readiness level, down from 9% last year, due to evolving AI-driven threats.
- 91% of organizations reported AI-related security incidents, but only 57% of employees fully understand these threats, leaving gaps in awareness.
- 64% of organizations experienced cyber-attacks, with external threats like malicious actors seen as more significant than internal ones.
- AI plays a crucial role in cybersecurity, with 98% using it for threat understanding, but oversight issues like “shadow AI” and unmanaged devices increase risks.
- 94% of organizations face talent shortages, with many reporting over 10 unfilled cybersecurity positions. Complex security infrastructures further hinder responses.
- Investment in cybersecurity is insufficient, with only 51% of organizations allocating more than 10% of their IT budget to it.
The Cisco Cybersecurity Readiness Index reveals challenges such as AI-related risks, talent shortages, complex security infrastructures, and insufficient investment in cybersecurity. Organizations must prioritize AI-driven solutions, streamline security frameworks, and address gaps in threat awareness to improve resilience.
Additionally, fostering a culture of continuous learning and upskilling among employees can help mitigate talent shortages. Organizations should also invest in advanced threat detection systems and real-time monitoring to stay ahead of evolving cyber threats. Collaboration with industry peers and sharing threat intelligence can further enhance preparedness. By adopting a proactive and comprehensive approach, businesses can strengthen their cybersecurity posture and safeguard critical assets.
Investment in cybersecurity is insufficient, with only 51% of organizations allocating more than 10% of their IT budget to it. This underinvestment leaves many organizations vulnerable to cyber threats, as attackers continue to evolve their techniques. To mitigate risks effectively, businesses must prioritize cybersecurity as a critical component of their overall IT strategy, ensuring adequate resources are allocated to safeguard sensitive data and infrastructure.

