Cyber Security’s New Workforce

A shortage in the global cybersecurity workforce continues to be a problem for companies in all industries and of all sizes. In fact, this shortage remains the number one job concern for those working in the field. 
 
Yet foreign adversaries and cyber criminals are getting more aggressive and advanced, and cyber threats have become an economic and security threat. The estimated current cybersecurity workforce is 2.8 million professionals, while the amount of additional trained staff needed to close the skills gap is 4.07 million professionals, according to (ISC)²
 
The data indicates a necessary cybersecurity workforce increase of 145% globally.
The recent Cybersecurity Workforce Study carried out by (ISC)² shows that these cybersecurity and IT professionals are generally satisfied in their careers and optimistic about their futures. But the size of the current workforce still leaves a significant gap between the number of cybersecurity professionals working in the field and the number needed to keep organisations safe.
 
However, the cyber security workforce shortage is reaching crisis levels. One estimate from Cybersecurity Ventures says the shortage will reach 3.5 million open cyber security positions worldwide by 2021.
 
In the US the NSA has spent the last 20 years cultivating an interwoven network of universities and community colleges across the country capable of educating students in rigorous cybersecurity programs that are tailored to the needs of the agency.
 
Diane Janosek, the head of the NSA’s National Cryptologic School, has set a goal for students to “learn cybersecurity education that can be applied to more than just the defense and intelligence sector. It could be applied to the banking industry, the finance industry, the healthcare industry, manufacturing.”
 
To ensure that these sectors are matched with adequately prepared talent, the participating institutions must meet rigorous curriculum standards that evolve with the threat landscape. 
 
The web of universities and community colleges across the US established a communication network that fosters real cooperation between the designated schools.  The partnerships with universities across the country also expand facility access for the NSA. For example, Dakota State University is developing a secure research facility for the government, called Madison Cyber Labs. If they don’t work for the government, students who graduate from programs like this  often end up working for local hospitals or school districts, sectors that have been devastated by the ransomware epidemic that has closed schools and hospitals. 
 
Cybersecurity Workforce Skills Gap Around The World
In the UK, the current cybersecurity workforce estimate is 289,000, alongside 121,000 in France and 133,000 in Germany. The shortage of skilled professionals across EMEA has grown to 291,000. The (ISC)² Cybersecurity Workforce Study is conducted annually to assess the US cybersecurity workforce gap, better understand the barriers facing the cybersecurity profession and uncover strategies that organisations can use to recruit, build and strengthen their cybersecurity teams. 
 
It provides insights on these talented individuals who are excelling in this profession, securing their organisations’ critical assets and advancing in their careers. Among the key findings from a study by (ISC)2:
 
• 65% of organisations report a shortage of cybersecurity staff; a lack of skilled/experienced cybersecurity personnel is the top job concern among respondents (36%)
• Two-thirds (66%) of the respondents reported that they are either somewhat satisfied (37%) or very satisfied (29%) in their jobs; and 65% intend to work in cybersecurity for their entire careers
• 30% of survey respondents are women; 23% of whom have security-specific job titles
• 37% are below the age of 35, and 5% are categorised as Generation Z, under 25’s
• 62% of large organisations with more than 500 employees have a CISO; that number drops to 50% among smaller organisations
• 48% of organisations represented say their security training budgets will increase within 2020.
 
(ISC)2:           Help Net  Security:         I-HLS:
 
You Might Also Read:
 
UK Cyber Security Skills Are On The Limit:
 
 
 
« Austria's Foreign Ministry Hit By A Big Attack
Unintended Consequences As Iran Admits It Destroyed Ukrainian Passenger Jet »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Grid32

Grid32

Grid32 provides independent computer system and physical security audit services to government and corporate clients of all sizes.

Shape Security

Shape Security

Shape Security provide best-in-class defense against malicious automated cyberattacks on web and mobile applications.

Maximus Consulting (MX)

Maximus Consulting (MX)

Maximus designs and delivers corporate-wide information security management system with our full-time IRCA Accredited consulting team.

Infodas

Infodas

Infodas provides Cybersecurity and IT consulting / system integration services as well as a range of innovative Cybersecurity products to public sector and commercial clients.

African Cyber Security

African Cyber Security

African Cyber Security and it's partners, have the expertise and skills to provide holistic solutions for companies, institutions and government.

Cyber Security Africa

Cyber Security Africa

Cyber Security Africa is a full-service Information Security Consulting firm offering a comprehensive range of Services and Products to help organizations protect their valuable assets.

Randstad

Randstad

Randstad provide outsourcing, staffing, consulting and workforce solutions in the USA across a wide range of job sectors including IT and cybersecurity.

InGuardians

InGuardians

InGuardians is an independent information security consulting firm specializing in penetration testing, threat hunting, and hardware hacking.

Tangible Security

Tangible Security

Tangible employs the most sophisticated cyber security tools and techniques available to protect our clients’ sensitive data, infrastructure and competitive advantage.

Partners in Regulatory Compliance (PIRC)

Partners in Regulatory Compliance (PIRC)

Partners in Regulatory Compliance provides an array of cybersecurity services including cybersecurity policy management, risk assessments and regulatory compliance consulting.

SLVA Cybersecurity

SLVA Cybersecurity

SLVA Cybersecurity excel at delivering security-as-a-service, fit-for-purpose, within the constraints of realistic budgets and business expectations.

Finesse Global

Finesse Global

Finesse is a global system integration and digital business transformation company.

Gorilla Technology Group

Gorilla Technology Group

Gorilla specializes in video analytics, OT network security and big data to support a wide range of solutions for commercial, industrial, cities and government purposes.

Redcoat AI

Redcoat AI

Redcoat AI provide a comprehensive security platform that continuously evolves with the threats and opportunities presented by AI.

appNovi

appNovi

appNovi inventories everything to map the attack surface, identify missing security agents, and prioritize vulnerabilities based on exposure.

Invary

Invary

Invary's expert Runtime Integrity solution, powered by NSA-licensed technology, verifies the security and confidentiality of your system.