Cyber Talent Crisis: Closing the Gap between Supply and Demand

Policy Cyber workforce demand is outpacing supply, survey finds

Introduction

The cybersecurity industry is facing a significant talent shortage as the demand for skilled professionals continues to outpace supply, according to a survey conducted by the nonprofit ISC2. The survey analyzed data from almost 15,000 cybersecurity practitioners and revealed that nearly half of them have been affected by cutbacks, including budget cuts, layoffs, and hiring freezes. This shortage of talent comes at a time when the global threat landscape is becoming increasingly complex and sophisticated, highlighting the urgency for organizations to invest in their teams and equip them with the necessary skills to combat evolving cyber threats.

The Urgent Need to Double the Cybersecurity Workforce

ISC2 CEO Clar Rosso emphasizes the pressing reality of the cybersecurity workforce shortage, stating that the field must be doubled to adequately protect organizations and their critical assets. This aligns with the findings of the survey, which indicate that the global cybersecurity workforce has grown by 8.7% to 5.5 million jobs compared to the previous year. However, the gap between the demand and supply of skilled professionals has grown by 12.6% over the same period.

The workforce gap in the survey does not estimate the number of open jobs versus those that are filled, but rather the estimated number of jobs required for organizations to effectively defend themselves against cyber threats. The report highlights that economic uncertainty, rapidly emerging technologies, fragmented regulations, and widening workforce and skills gaps are creating significant uncertainty for cybersecurity professionals tasked with protecting global infrastructure and systems.

Policy Efforts to Address the Cyber Talent Crisis

Recognizing the pressing need to address the cybersecurity workforce shortage, the Biden administration has released the National Cyber Workforce and Education Strategy. This strategy focuses on ensuring that every American has cyber skills, transforming cyber education, and expanding both national and federal cyber workforces. The strategy acknowledges the ISC2 report’s findings that there are currently 400,000 unfilled cybersecurity jobs in the United States.

Additionally, Congress has recently taken steps to address this issue with a proposed bill from Reps. Nancy Mace and Katie Porter. This bill aims to change how the federal workforce operates by only considering formal education if it directly aligns with the position. This approach recognizes that many cybersecurity professionals have skillsets acquired outside of traditional formal education routes, and limiting job consideration to formal education may hinder the recruitment of highly qualified individuals.

The Importance of Investing in Cybersecurity Teams

The survey shows that more than half of the cybersecurity professionals surveyed globally reported a shortage of staff in their organizations, and over 90% stated that they have a skills gap. These findings highlight the urgent need for organizations to invest in their cybersecurity teams. This investment should include recruiting new talent with the necessary skills and providing ongoing training and professional development opportunities for existing staff.

Conclusion

The survey conducted by ISC2 highlights the growing demand for cybersecurity professionals and the widening gap between supply and demand. As the cyber threat landscape becomes increasingly complex and sophisticated, organizations must recognize the critical importance of investing in their cybersecurity teams. Government efforts, such as the National Cyber Workforce and Education Strategy, are vital in addressing the talent shortage, but organizations also need to take proactive steps to attract and retain skilled professionals. This includes considering non-traditional pathways to identify qualified candidates and providing continuous training and development opportunities. Only through collective action can we meet the ever-growing demand for cybersecurity professionals and effectively protect vital infrastructure and systems from cyber threats.