Forrester’s 2025 data indicates that upskilling security staff isn’t a key priority for security decision-makers; only 22% said that their organization invested in upskilling in response to a breach. However, our data shows that upskilling has a tangible positive impact on incident response. Security decision-makers whose organizations invested in upskilling reported quicker times across all incident alert and response steps. The greatest disparity was for detection and response: On average, organizations investing in upskilling complete it six to eight days faster. This is a snapshot of Forrester’s data on how organizations prepare for and respond to security breaches.