It was revealed that the cybersecurity preparedness of Korean companies is still low.

Cisco recently released its 2025 Cybersecurity Readiness Index.

According to the report, the level of cybersecurity preparedness of Korean companies is still low, and the advancement of AI technology is creating new security threats.

It was confirmed that only 3% of domestic companies have reached the ‘Mature’ level of cybersecurity preparedness.

This is a slight decrease from last year's 4%, suggesting that additional efforts are needed to strengthen companies' security capabilities.

In particular, the impact of AI on the security environment is significant, as 83% of companies have experienced AI-related security incidents. However, only 30% of these companies responded that they fully understand AI-based threats, indicating that AI is further exacerbating security vulnerabilities.

The cybersecurity environment of Korean companies is becoming increasingly complex, with 40% of all companies experiencing cyberattacks over the past year. Accordingly, the need for an integrated security strategy is further emphasized.

“As AI fundamentally transforms enterprises, new types of threats are emerging,” said Jeetu Patel, vice president and chief product officer at Cisco. “The burden on infrastructure and security personnel is unprecedented.”

He then warned, “If we do not reorganize our security strategy, we will inevitably be eliminated in the AI era.”

93% of Korean companies are planning to upgrade their IT infrastructure, but only 33% of them have allocated more than 10% of their IT budget to cybersecurity.

This is a 7% decrease from the previous year, showing the need for more investment in strengthening security.

In addition, it was revealed that companies are experiencing a serious shortage of security personnel. 97% of all respondents responded that they are short of skilled security personnel, and 34% of companies responded that they have more than 10 security-related positions unfilled.

This lack of manpower is a major concern as it could slow down security response and diminish threat management capabilities.

As cybersecurity threats become more sophisticated as they combine with AI technology, companies should increase their investments in AI-based security solutions and improve employees’ security awareness. A strategic approach that utilizes AI throughout the entire process of AI threat detection, response, and recovery is essential, and it is also necessary to systematically manage risks caused by unmanaged devices and shadow AI.

“It is essential for domestic companies to have security resilience that goes beyond simple defense to include recovery and restoration after a threat occurs,” said Jihee Choi, CEO of Cisco Korea. “It is more urgent than ever to strengthen AI-based threat response capabilities and build a security portfolio that encompasses new risks.”