In 2023, the importance of diversity, equity, and inclusion (DEI) in cybersecurity leadership discussions continues to grow. As organizations address the cybersecurity talent gap, they are recognizing that diversity is not just about numbers or fairness; it is also necessary for developing new approaches to security problems.
Deidre Diamond, CEO and founder of CyberSN, a cybersecurity staffing firm, emphasizes the importance of diversity in cybersecurity efforts. She believes that in order to effectively protect businesses, it is crucial to understand that attackers come from diverse backgrounds. Therefore, investing in diverse talent and developing their skills is not only the right thing to do, but it is also essential for success in the fight against cyber threats.
However, as organizations strive to build diverse cyber workforces, they must be mindful of potential pitfalls. Christy Wyatt, president and CEO of Absolute Software, warns against unintentionally alienating diverse candidates through the language used in recruitment efforts. It is important to focus on candidates’ skills and capabilities rather than solely emphasizing diversity goals. Additionally, once diverse talent is hired, organizations must ensure that they are included and engaged within the team. Failure to do so may result in talented individuals leaving the company.
Larry Whiteside, Jr., CISO of RegScale and co-founder of Cybersity, a nonprofit supporting minority cybersecurity professionals, emphasizes the need for inclusive environments. He highlights the importance of giving diverse individuals a voice and ensuring that they feel valued and heard within the organization. Whiteside believes that internal engagement and communication are essential for supporting and retaining diverse talent.
Christy Wyatt, drawing from her personal experience as a technology leader, acknowledges that not all diversity programs are effective. She emphasizes the importance of creating a culture that rewards performance and values diverse perspectives. Wyatt advocates for a team-based approach, where team performance is recognized and rewarded, rather than individual achievements. At Absolute Software, this approach has been implemented, with equal pay for role and team-based bonuses.
In addition to financial rewards, how a company promotes diversity successes can shape its culture and retain diverse talent. Wyatt shares a story of celebrating a cybersecurity team that was over 50% female, focusing on their accomplishments and the impact they had on the business. While diversity was acknowledged, the emphasis was on the team’s cybersecurity work and the value they brought to the company.
Overall, organizations in the cybersecurity industry are recognizing the importance of diversity, equity, and inclusion. It is not just about meeting quotas or being fair; it is about fostering new ways of thinking and tackling security challenges. By investing in diverse talent, creating inclusive environments, and valuing team performance, organizations can bridge the cybersecurity talent gap and strengthen their defenses against cyber threats.