TLDR: A recent IDC study, commissioned by Fortinet, reveals that Artificial Intelligence (AI) has become integral to cybersecurity strategies in the Philippines. Over 90% of organizations are now leveraging AI, moving beyond pilot projects to full-scale adoption, to combat increasingly sophisticated AI-driven cyber threats. The study highlights a significant increase in AI-powered attacks and a strategic shift in security investments and workforce development towards AI-centric roles.
MANILA, Philippines – A groundbreaking 2025 study by IDC, commissioned by global cybersecurity leader Fortinet, indicates a pivotal shift in the Philippines’ cyber defense landscape: Artificial Intelligence (AI) is no longer an experimental tool but the frontline of cybersecurity. Philippine organizations are rapidly transitioning from pilot AI projects to full-scale integration to counter the escalating sophistication of AI-driven cyberattacks.
The study, which surveyed 550 IT and security leaders across 11 Asia-Pacific markets between February and April 2025, underscores the urgency of this adoption. A staggering 78% of Philippine organizations reported encountering AI-powered cyber threats in the past year. Of these, 64% experienced a twofold increase in threat volume, while 28% faced a threefold surge. These modern attacks are characterized by their speed, stealth, and adaptability, often exploiting vulnerabilities in governance, visibility, and internal processes.
In response, more than nine in ten (specifically 92%) Philippine organizations have already integrated AI into their security operations. This adoption extends beyond mere detection, encompassing advanced use cases such as automated incident response, predictive threat modeling, AI-driven threat intelligence, and behavioral analytics. While AI-powered detection has become ‘table stakes,’ the focus is now shifting towards response, prediction, and orchestration as the next frontier in cyber resilience. Generative AI (GenAI) is also gaining traction for lighter operational tasks, including playbook execution, policy updates, and social engineering detection, though most firms currently limit its role to ‘co-pilot’ functions rather than fully autonomous remediation.
Simon Piff, Research Vice President at IDC Asia-Pacific, commented on this evolution, stating, “Organizations are no longer experimenting with AI — they’re embedding it across detection, response, and team design. This signals a new era of smarter, faster, and more adaptive security operations.”
The embrace of AI is also profoundly reshaping the cybersecurity workforce. The most sought-after roles now include AI security engineers, data scientists, and threat intelligence analysts, reflecting a strategic pivot towards teams built around AI capabilities. Bambi Escalante, Country Manager at Fortinet Philippines, emphasized, “CISOs across the Philippines are entering a more advanced phase of cybersecurity planning—one where AI is not just augmenting defenses but influencing how organizations structure teams, allocate budgets, and prioritize threats.”
Despite the growing awareness and investment, challenges persist. While 80% of organizations reported a modest increase in cybersecurity budgets (mostly under 10%), the human element remains stretched. Only 13% of IT staff are dedicated to cybersecurity, and fewer than one in six firms have a dedicated Chief Information Security Officer (CISO). Burnout and tool sprawl continue to hinder effective execution.
Also Read:
- Artificial Intelligence Reshaping Infrastructure Landscape, Experts Affirm
- Philippines Generative AI Market Set for Significant Growth, Expected to Reach Over $1.2 Billion by 2033
To address this complexity, organizations are pursuing strategic consolidations. The study found that 96% of Philippine organizations are actively converging or considering the convergence of networking and security functions, while 70% are exploring vendor consolidation strategies to simplify management, improve integration, and strengthen their overall security posture. This holistic approach aims to build more resilient and adaptive security models capable of keeping pace with the increasingly complex and distributed cyber risk landscape.
