In his keynote, Lauri Aasmann pointed out that governments worldwide are investing heavily in advanced technologies to protect their digital ecosystems as cyber threats grow in scale, complexity and geographical scale. Yet technology cannot compensate for the lack of skilled people and people instead of technology form the first and last line of cyber defence. Human expertise has ability to anticipate threats, response to incidents and build long-term strategic capacity.

In today’s digital landscape, technology alone cannot guarantee security – people remain the first and last line of defence. In EU, we embrace this principle through the Expert Pool of EU CyberNet project, a network of highly skilled EU professionals who are available to strengthen cybersecurity capacity across partner countries. By sharing knowledge, guiding policy, and delivering specialized training, these experts empower institutions to build resilience from within. A strong human expert is as critical as any technical safeguard.

Contrary to the concern that AI represents an existential threat to the cybersecurity profession, Lauri Aasmann offered a different view. At least for the next 3–5 years, AI will not be able to manage the full complexity of cybersecurity tasks on its own. It already surpasses humans in processing large volumes of data and detecting anomalies, but it cannot replace judgement, legal responsibility, strategic thinking, or accountability. AI can support cybersecurity, but it cannot be the foundation of cybersecurity. This means we must recalibrate our role as the human element: let machines handle log analysis, while we operate as architects, supervisors, and teachers of our AI tools.

Lauri Aasmann demonstrated global data of the human challenge: the cybersecurity workforce gap has reached an estimated 4.8 million professionals worldwide and the global workforce would need to almost double to meet the demand. Moreover, organisations increasingly report internal skills shortages and gaps. At the same time, cyber incidents continue to cause growing financial and operational disruption, particularly in rapidly digitalizing and growing economies.  This means that human capabilities instead of hardware and technology have become defining bottlenecks in national cyber resilience. Strengthening human capacity is thus one of the most critical priorities for governments seeking to protect national infrastructure, digital services and economic stability, he underlined.

Drawing from the example of the European Union, Lauri Aasmann explained how the EU addresses this challenge through long-term capacity building partnerships like EU CyberNet or ESIWA+. Central to EU CyberNet’s work is its Expert Pool – a network of more than 600 cybersecurity professionals who support partner countries through tailored training, expert missions and policy advisory support. As the experts come from a variety of backgrounds ranging from policy to technical in government and business, they can assist governments in areas ranging from incident response preparedness and national strategy development to strengthening institutional coordination and regulatory frameworks. Lauri Aasmann noted that cyber resilience cannot be imported – it must be grown locally, highlighting the EU’s focus on enabling partner countries to lead and sustain their own cybersecurity development.

Such approach is particularly relevant in Indo-Pacific region where rapid digital transformation accelerates, making cybersecurity effectively the single most important ‘insurance policy’ for national economies and business alike. Countries across the region are expanding cloud services, digital finance and interconnected critical infrastructure, creating growing demand for cybersecurity expertise: as cyber risks have become more evident along with growing awareness among executives, 97% of businesses treat cybersecurity as top business priority and are ready to invest in people in addition to technology.

Lauri Aasmann suggested practical steps that governments and institutions can implement.

• Investing in people before products
  Many governments currently allocate less than 3% of cybersecurity budgets to workforce training. Increasing investments in skills development strengthens institutional resilience and ensures that technological solutions are used effectively.
• Creating pathways for non-traditional talent
  Nearly half of the global cybersecurity workforce comes from different background. Expanding career transition programmes and interdisciplinary education can significantly widen the talent pool.
• Treating cybersecurity as a national skills priority
  Cybersecurity roles are projected to grow substantially faster than most other professions. Recognising cyber expertise as a strategic national workforce priority helps to ensure sustainable talent development and long-term resilience.
• Integrating AI skills
  AI is rapidly transforming cybersecurity roles and requires cross-sectoral knowledge. But also, while AI-driven and automated cybersecurity technologies are increasingly essential for analysing large volumes of data, detecting patterns and supporting rapid incident response, they cannot replace skilled professionals.
• Strengthening international expert networks
  Participation in cooperation platforms, like EU CyberNet, enables peer-to-peer knowledge exchange, supports institutional learning and strengthens sustainable capacity development.

As digital transformation accelerates globally, cybersecurity has become a fundamental pillar of national stability, economic security and public trust. Building resilient cyber ecosystems requires more than deploying advanced tools. It requires investing in skilled professionals, strengthening institutions and fostering trusted international partnerships. Through initiatives such as EU CyberNet, the European Union continues to demonstrate its commitment to building sustainable cybersecurity that is built through knowledge sharing, expert cooperation and long-term capacity development. Afterall, in an increasingly interconnected threat environment, empowering people remains the most effective and enduring defence.