Britain’s Cybersecurity Skills Gap

Globally, there were an estimated 3 million unfilled cybersecurity vacancies at the end of 2018 and it has been predicted that there could be as many as 3.5 million unfilled cybersecurity roles in the UK alone by 2022. In Britain, the UK government has created the Initial National Cyber Security Skills Strategy with the intention of resolving the skills shortage, but it is going to need a concerted effort from everyone involved to reduce the skills gap. 

This skills gap in the UK is the result of a number of factors, such as the outpacing of new technologies creating a shortage in specialist skills, a disconnect between education and the industry and gender inequality. Each one of these issues will need to be addressed by the industry and educators if this ever-increasing skills gap is to be closed. 

Specialist Skills
Many recruiters and employers claim that positions stay vacant because many candidates lack the required level of experience and the specialist skills needed to perform the role. However, with more and more positions opening up and remaining vacant, the industry will need to address this skills shortage and the reasons behind it. 

As an industry, cybersecurity is both aided and hindered by the rapid pace that technology evolves. As new technology is developed and introduced into the world those working in cybersecurity are tasked with adapting to this new technology.
With new technologies emerging every day, the UK’s skills gap is unlikely to lessen without major efforts from both employers and educators. The need for specialist skills in the industry that relate to new technologies such as cloud computing is readily apparent. These new technologies come with security vulnerabilities that require specialized training and knowledge to address. 

However, many graduates lack the understanding or experience of these new technologies due to how new they are. This would suggest that there is a disconnect between the industry and education and that the objectives of the industry aren’t being fully met by education institutions. 

The Disconnect Between Education And Industry
At the time of writing, there are only 4 specific cybersecurity bachelor’s degrees taught in the UK that have been approved by the National Cyber Security Centre. In addition, cybersecurity is rarely chosen as a specialism by students until Master’s level, resulting in very few graduates leaving university with a strong understanding of cybersecurity. 

The most in-demand specialist skill currently in demand in the UK is penetration testing. However, despite being a vital and sought after skill in graduates, there is only one course that is listed on the UCAS website that makes any reference to penetration testing. To begin to close the skills gap, there needs to be improved communication and cooperation between education and the industry. 

Cybersecurity businesses will need to identify their own weaknesses and work together with education providers to enhance student’s understanding and interest in the most in-demand areas of cybersecurity to help to tackle the skills shortage. 

Professional Certifications
However, not all of the responsibility for the skills shortage lies with education providers. Employers that are struggling to fill roles requiring more advanced skills need to develop and train their own staff to progress their teams. With so many businesses struggling to fill specialist roles, internal training and up-skilling could be essential in tackling the skills shortage. 
There is a range of professional certificates that are able to provide cybersecurity professionals with a more comprehensive understanding of specialist areas. For example, the Certified Ethical Hacker (CEH) qualification familiarises staff with penetration testing methods. 

Gender Inequality And Diversity
Another commonly suggested way to tackle the skills gap is to open the cybersecurity industry up to women and other diverse applicants. Only 16% of cybersecurity students that graduated in 2017 were women and women professional in cybersecurity are paid on average 25% less than their male counterparts. If the cybersecurity industry wants to resolve this skills gap it will need to entice as many candidates as possible and make efforts to diversify their talent pool. 

Other STEM industries that have made efforts to tackle gender inequality, such as engineering, are already beginning to see improvements in their own skills gaps. In any industry, diversity is essential and helps to create a team from a range of backgrounds and experiences that can work together to problem-solve from a range of angles. 

With the UK facing such a dramatic shortage of skilled cybersecurity staff in a vital industry it is imperative that we work to expand the perception of what a cybersecurity professional looks and thinks like to make the role as open and attractive to as many people as possible. 

About the Author:
Dan Baker is a Content Writer that works with SecureTeam, a cybersecurity consultant that provides a range of cybersecurity solutions to small and medium businesses across the UK. 

You Might Also Read:

Employee Training Is Vital For Commercial Cybersecurity:

Closing The Skills Gap Starts At School:

 

« Google Challenged For Collecting American Health Data
Killer Robots For Export »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

IOActive

IOActive

IOActive serves as a trusted security advisor to the Global 500 and other progressive enterprises, helping to safeguard their most important assets and improve their overall security posture.

Engage Black

Engage Black

Engage Black provides solutions for securing and protecting cryptographic keys, data at rest, and data in motion.

IntelliGO Networks

IntelliGO Networks

IntelliGO Networks is a cybersecurity company focused on Managed Detection and Response (MDR).

UK Cyber Security Forum

UK Cyber Security Forum

UK Cyber Security Forum is a community interest group for cyber security companies in the UK.

Cienaga Systems

Cienaga Systems

Cienaga Systems is a leader in autonomous cyber threat hunting technology.

Cyber Defense Labs

Cyber Defense Labs

Cyber Defense Labs helps companies identify, mitigate and reduce risk as a trusted, reliable partner for cyber risk management.

DefCamp

DefCamp

DefCamp is the most important annual conference on Hacking & Information Security in Central Eastern Europe.

Fly Ventures

Fly Ventures

Fly Ventures is a seed-stage venture capital fund for outstanding teams building Enterprise and Deep Tech startups in Europe.

Tangible Security

Tangible Security

Tangible employs the most sophisticated cyber security tools and techniques available to protect our clients’ sensitive data, infrastructure and competitive advantage.

Neosecure

Neosecure

NeoSecure is a specialist Cybersecurity Solutions and Managed Services provider in Latin America.

xMatters

xMatters

xMatters is a digital service availability platform that helps enterprises prevent, manage, and resolve IT incidents before they can become business problems.

ProCheckUp

ProCheckUp

ProCheckUp is a London-based independent provider of cyber security services, including IT Security, Assurance, Compliance and Incident Response.

StrataCore

StrataCore

StrataCore is a single-source technology lifecycle advocate that works behind IT teams as a strategic partner to help them achieve peak enterprise outcomes.

Grindstone Ventures

Grindstone Ventures

Grindstone Ventures is a post-seed fund that supports post-seed equity and quasi-equity investments in early-stage innovation-driven and/or technology companies.

Veza Technologies

Veza Technologies

Veza is the authorization platform for data. Built for hybrid, multi-cloud environments, Veza enables organizations to manage and control who can and should take what action on what data.

Tracer

Tracer

Tracer (formerly Appdetex) is a next-generation brand protection solution. It constantly finds, analyzes, and stops brand abuse across Web2 and Web3 digital channels.