IT Security

Benchmarking cyber staff

by Mark Rowe

A global survey of over 19,000 cybersecurity professionals, 3,694 from Europe, by the IT sector body (ISC)2’, suggests that European organisations are planning the fastest rate of cybersecurity hiring in the world, with 38pc of hiring managers in the region wanting to grow their workforce by at least 15pc in the next year. This is despite the fact that two-thirds of organisations state that they have too few cybersecurity workers, as the region faces a projected skills gap of 350,000 workers by 2022, according to the IT association.

The report calls for employers to do more to embrace newcomers and a changing workforce, as 92pc of hiring managers admit they prioritise previous cybersecurity experience when choosing candidates, and that most recruitment comes from their own professional networks. Hiring managers identified that they are relying on their social and professional networks (48pc), followed closely by their organisation’s HR department (47pc), as their primary source of recruitment.

The latest report, Benchmarking Workforce Capacity and Response to Cyber Risk, released from the 2017 Global Information Security Workforce Study, the 8th Edition of the Study which has been running since 2004, offers a deep dive into the growing cybersecurity skills gap. It shows that strong recruitment targets, a shortage of talent, and disincentives to invest in training are contributing to the skills shortage with 70pc of employers around the globe looking to increase the size of their cybersecurity staff this year.

The demand is set against a range of security concerns which continue to develop, with the threat of data exposure clearly identified as today’s top security concern amongst professionals around the world. Concern over data exposure reflects the advent of new regulations aimed at enhancing data protection around the world, including Europe’s General Data Protection Regulation to be in force by May 2018. The Study was conducted by Frost & Sullivan for the Center for Cyber Safety and Education, with the support of (ISC)2, Booz Allen Hamilton and Alta Associates.

The report describes a revolving door of scarce, highly paid workers amidst a non-existent unemployment rate of just 1pc in Europe. Organisations are struggling to retain their staff, with 21pc of the global workforce stating they have left their jobs in the past year, and facing high salary costs, with 33pc of the workforce in Europe in particular making over $100,000 USD – 95,000 euros or £78,000 per year.

“The combination of virtually non-existent unemployment, a shortage of workers, the expectation of high salaries, and high staff turnover that only increases among younger generations creates both a disincentive to invest in training and development and a conundrum for prospective employers: how to hire and retain talent in such an environment?” states the report.

Recruitment

Recommends made suggest that organisations adapt their approach to recruitment and draw from a broader pool of talent. This is backed by findings that show workers with non-computing related backgrounds, account for nearly a fifth of the current workforce in Europe and that they hold positions at every level of practice, 63pc at manager or above. It also highlights a mismatch between the skills recruiters are looking fo and workers priorities for developing a successful career, suggesting skills sets may not be keeping pace with requirements. The top two skills workers are prioritising include ‘cloud computing and security’ (60pc) and ‘risk assessment and management’ (41pc), while employers prioritise looking for communication (66pc) and analytical skills (59pc). Only 25pc and 20 pc of workers are prioritising communication and analytical skills respectively.

Recommendations include:

•Looking beyond Social and Professional networks as the main channel of recruitment. to open doors for new, younger and more diverse talent.
•Accepting the need to Invest in development and training: More talent is needed to stem the high levels of movement on job markets.
•Better Communication of current employer requirements: Workers prioritise different skills for their professional development than what employers look for in the workforce
•Embracing a broader talent pool: Individuals with non-technical backgrounds often rise to become key decision makers, with 30pc of Directors, Executive Management and C-suite professionals in Europe beginning in non-technical careers.

Adrian Davis, Managing Director, EMEA at (ISC)2 said: “There are real structural concerns hampering the development of the job market today that must be addressed. It is particularly concerning that employers appear reluctant to invest in their workforce and are unwilling to hire less-experienced candidates. If we cannot be prepared to develop new talent, we will lose our ability to protect the economy and society.”

And Jarad Carleton, Principal Consultant, Frost & Sullivan said: Businesses cannot afford to ignore investing in training and development programmes for their workforces. Those that do so will become much easier potential targets for cyber criminals and risk facing high profile hacks similar to those we have seen in recent weeks. Europe has traditionally been strong at investing in its workforce, and must continue to provide regular training and recruit from non-technical backgrounds to help ease the skills shortage. We predict the skills gap to become much more acute in the coming years if businesses fail to do so.” 


About the Center for Cyber Safety and Education 
The Center for Cyber Safety and Education

Formerly the (ISC)² Foundation, it’s a nonprofit charitable trust. Visit www.iamcybersafe.org.

Newsletter

Subscribe to our weekly newsletter to stay on top of security news and events.

© 2024 Professional Security Magazine. All rights reserved.

Website by MSEC Marketing