The cybersecurity industry is currently facing a significant talent shortage, with reports estimating a deficit of around 3.4 to 3.5 million individuals worldwide. However, this shortage is not unique to cybersecurity and can be seen in other industries as well. For instance, the medical industry is grappling with a shortage of more than 10 million physicians globally. This skills gap poses challenges for organizations, with 60% of them struggling to retain employees and 62% operating with a talent deficit, according to ISACA.
Fortunately, the cybersecurity industry is in a favorable position to address this talent shortage through collective efforts as a community and as individual organizations. There are several positive steps that can be taken to mitigate the impact of the shortage:
1. A blended approach to recruitment: While traditional methods of talent recruitment may have been successful in the past, identifying individuals with the necessary educational background, certifications, experience, and qualifications has become increasingly difficult. To address the shortage effectively, the industry must broaden its horizons and cast a wider net. Cybersecurity requires individuals with an interest in technology, a puzzle-solving mindset, curiosity to explore how things work, and the ability to secure systems seamlessly. This may mean considering individuals who may not have followed the traditional tertiary education path. However, it is crucial to ensure that these individuals possess strong ethics, can work well in teams, and have a clear understanding of the boundaries within cybersecurity.
2. More diversity: Diversity is often associated with gender representation in cybersecurity, and while it is essential to bring more women into the field, diversity encompasses various dimensions beyond gender. It includes cultural backgrounds, age, religion, and ethnicity. When bringing new individuals into the industry, it is essential to consider the unique contributions they can bring in terms of cultural values and perspectives. Finding and appropriately training individuals from non-traditional educational paths is also crucial in fostering diversity within the industry.
3. Mentorship: Mentorship programs have emerged as a positive development in identifying individuals who possess the skills, temperament, and ethics required for a successful career in cybersecurity. Industry associations and community colleges can serve as valuable mechanisms for connecting with and assessing the skills of potential candidates. Mentorship is not only about recruiting new talent but also about nurturing, training, and retaining them. Providing new employees with both a mentor and a clearly defined career pathway, complete with goals and targets, can strengthen their connection to the industry and create lasting ties.
4. Leadership and culture: Leadership within the cybersecurity industry should comprise individuals with both technical skills and business acumen. While not everyone in leadership roles needs to be a cybersecurity expert, having an appreciation and understanding of the field is crucial in providing effective direction to teams. It is imperative to ensure that those responsible for hiring decisions possess sufficient knowledge and expertise in the field.
5. Technology: Technological advancements, such as automation, machine learning, and artificial intelligence (AI), can play a significant role in addressing the skills shortage in cybersecurity. These technologies can supplement and complement the work done by human resources, allowing them to focus on more creative and engaging tasks. By leveraging technology, the industry can reshape the value proposition it offers to potential employees and enhance job satisfaction.
In conclusion, to attract new talent and address the skills shortage holistically, the cybersecurity industry must adopt a variety of strategies. This includes broadening the recruitment pool, promoting diversity and inclusion, implementing mentorship programs, nurturing strong leadership, and leveraging technology. While building a robust pipeline to fully address the shortage takes time, these measures can help bridge the talent gap and position cybersecurity as a strategic enabler of innovation within organizations.