Cybersecurity Complexity And AI-Driven Threats Outpace Readiness Across Australia: Forrester Study

A study by Forrester Consulting has found that Australian organisations are struggling to keep pace with cybersecurity threats as internal complexity and AI-driven attacks strain their ability to respond.

The research, commissioned by Fortinet and based on a survey of 585 Asia-Pacific cybersecurity decision-makers and influencers completed in March 2026, points to fragmented security tools, overwhelming alert volumes and increasingly sophisticated AI-driven threats as the primary pressures facing security teams.

In Australia, the findings indicate a shift toward simplifying security architectures, improving operational efficiency and embedding AI into unified platforms.

Complexity As A Risk Driver

The study found that 63 per cent of Australian organisations cite AI-driven threats as a top concern, while 60 per cent point to fragmented tools and architectures and overwhelming alert volumes as key issues.

Security operations teams are under pressure. Forty-nine per cent of organisations reported that alert volume makes it difficult to distinguish genuine threats from noise, and 43 per cent are still relying on manual workflows to manage security operations.

Cybersecurity maturity remains constrained across the market. Sixty-eight per cent of organisations sit at an intermediate maturity stage, with only 16 per cent reaching what the study classifies as advanced levels.

Cornelius Mare, Chief Information Security Officer for Australia at Fortinet, described the challenge as one of integration rather than technology alone.

“Australian organisations are placing significant expectations on AI to transform security operations, from improving detection to accelerating response,” Mare explained. “However, AI can only deliver meaningful outcomes when it is built on an integrated foundation. Without unified visibility and connected data across environments, AI risks amplifying complexity rather than reducing it. Integration is what enables AI to operate at scale and deliver real security impact.”

Shift Toward Platform Consolidation

Organisations are moving toward unified, platform-based security architectures. While only 37 per cent operate a unified platform today, this figure is expected to rise to 53 per cent over the next 12 to 24 months.

The shift is being driven by the need to reduce tool sprawl (cited by 58 per cent), improve integration (52 per cent) and manage growing hybrid complexity (49 per cent).

Future priorities reflect this transition, with organisations focusing on security operations centre automation, improved visibility and platform consolidation to improve efficiency and scale operations.

However, barriers remain. Fifty-one per cent cite migration cost and disruption as obstacles, and 46 per cent remain uncertain about platform capabilities across domains.

Despite those concerns, 90 per cent of organisations expect improvements in operational metrics through consolidation. More than 60 per cent anticipate gains of at least 10 per cent in areas such as detection and response times, analyst productivity and overall SOC efficiency.

AI Investment Growing But Readiness Lagging

AI is emerging as both a growing threat vector and a tool for defence, according to the study. Eighty-four per cent of organisations plan to increase their AI budgets, with more than half expecting double-digit growth in spending.

More than 60 per cent expect AI to improve detection accuracy, accelerate response and strengthen their overall security posture. Organisations also see AI as a way to reduce complexity, with 58 per cent expecting consistent policy enforcement, 57 per cent expecting centralised control and 56 per cent expecting reduced manual workflows.

However, the study found that readiness gaps persist. Fragmented environments, limited automation and a lack of unified data are hindering effective AI adoption. Many organisations are still building the foundational capabilities needed to use AI effectively across their security operations.

Analyst Perspective

Amelia Lau, Forrester Consulting Project Lead, pointed to the gap between investment and operational maturity.

“Organisations across APAC are facing a dual challenge – rapidly evolving AI-driven threats and increasing internal complexity,” Lau stated. “While investment remains strong, many are still struggling to operationalise security effectively. Moving toward integrated, platform-based approaches will be critical to improving visibility, efficiency and resilience.”

Australian Market Context

Mare framed the Australian landscape as one where ambition is running ahead of infrastructure.

“Australian customers are dealing with increasingly complex environments where fragmented tools, limited visibility and growing alert volumes are making it harder to detect and respond to threats effectively,” Mare commented. “At the same time, they are looking to leverage AI to improve speed and efficiency but often lack the integrated foundation to do so.”

The findings suggest that for many Australian organisations, the path to improved cybersecurity outcomes runs through architectural simplification and platform consolidation before AI can be deployed effectively across security operations.

Last Updated on July 21, 2026 by Nick Ross