Enterprise Mandates Drive 40% Growth in Cybersecurity Awareness Programs

Thirty percent of large enterprises now require training programs that raise team AI literacy, a direct response to campaigns that rely on machine learning for targeting.

The shift matters because attackers now compromise systems in an average of 29 minutes. That window leaves little room for delayed recognition of threats such as phishing emails that mimic legitimate internal requests.

Local tech firms respond to the same pressures

Born’s technology community, already dense with startups and established vendors, faces identical exposure. Teams handling sensitive customer data must treat basic risk awareness as a shared operational duty rather than an occasional exercise.

Under the NIS2 regulation, any individual who touches IT systems or holds access to sensitive records must keep a working grasp of cyber risks. The rule applies uniformly across sectors and removes the option to treat awareness as optional for certain roles.

Statistics show the scale of the change

Eighty-two point six percent of cybersecurity professionals report concern over AI-powered phishing, which produced 37 percent of all AI-related data breaches recorded in 2025. These figures come from industry surveys compiled by multiple research outlets and appear in reports hosted at sentinelone.com, techtarget.com, coursera.org, pandasecurity.com and splunk.com.

Because the average breach time has fallen to 29 minutes, organizations that delay updated training increase their exposure window. The 30 percent mandate rate for AI-focused literacy sessions indicates where capital and staff hours are being allocated first.

Individuals can begin by confirming they know how to spot phishing attempts, apply secure passwords and follow established data-handling rules. Those steps align with the minimum standard now expected under NIS2 and reduce the chance that a single click opens a path for attackers.