Cyber Security Skills Are On The Limit

The range of technical and specialist skills that are needed to ensure that the services, systems and networks are secure are in short supply. 
 
While UK has one of the most vibrant digital economies in the world, there are not enough people with the cyber security skills base to go round, with both the Government and private sector affected by the shortage in skills.
 
A new, in-depth piece of research conducted amongst UK CIOs and senior IT professionals has revealed that the cybersecurity skills gap has reached a crisis point. 
 
Cybercrime is on the rise and businesses large and small are at risk. For management, the question is not if you will be targeted, but when. British businesses are on the back foot in the ongoing war against online fraud and cybercrime and another recent industry study estimates that cyber-crimes cost UK businesses £2.3million per minute in 2018.
 
The study from digital resilience experts RedSeal, has unearths major concerns about business’ ability to develop, attract and retain new talent with the right skillset to stand up against an ever growing threat landscape. Generation Z are growing up as digital natives, with new options for coding classes from a young age. Universities need to follow this through and place an emphasis on up-skilling the next generation.
 
RedSeal say that as many as 87% of CIOs and senior IT pros reported that they are struggling to find cybersecurity pros with the expertise needed to combat serious and organised online crime.
 
Almost three quarters (73%) went on to say that uncertainty around Brexit is a huge  concern when it comes to hiring security professionals from outside the UK.
 
The participants believe that this widening gap has the potential to cause irreparable damage to the UK businesses and RedSeal is urging the UK government to create a more robust education policy that will deliver the skills needed in the future. 
"Across the industry, we have drained the talent pool for security professionals," said Mike Lloyd, CTO at RedSeal. "There's a global shortage of about 4 million cybersecurity pros, up from just over 3 million, last year." 
 
An overwhelming 95% said that Brexit will widen the current skills gap, since many IT security professionals currently within British business are from outside the UK, mostly due to the lack of advanced cybersecurity education provided locally. 
There’s nowhere near enough homegrown talent, with the top experts coming from Europe and Israel, where individuals are still being conscripted to cope with cyber warfare!
 
It has been just over a year since Parliament’s Joint Committee on the National Security Strategy published a report exposing the UK’s chronic lack of digital skills, even within some of its own security agencies. The report revealed that ‘although the UK has one of the most vibrant digital economies in the world, there is not currently the cyber security skills base to match, with both the Government and private sector affected by the shortage in skills.’ 
 
At the time, authors of the report, titled Cyber Security Skills and the UK’s Critical National Infrastructure, voiced huge concerns around the Government’s lack of urgency in addressing the cybersecurity skills gap in relation to Critical National Infrastructure, yet still, nothing has been done to address this.
 
Cybercrime's  impact on UK business continues to grow. In fact, a staggering 81% report that they have suffered a cybersecurity breach in the last 12 months. 
 
The lack of skills has also contributed to a lack of proper response planning and almost half (40%) of senior IT pros state that their business doesn’t even have a plan in place to respond to a security breach. The UK's education system can help, but not quickly as professionals agree that it takes about 10 years of real-world experience to develop the skills needed to combat today's threats, so we're facing a sustained drought for talent.  
 
In 2018, UK Parliament's Report (Cyber Security Skills and the UK’s Critical National Infrastructure) revealed that "although the UK has one of the most vibrant digital economies in the world, there is not currently the cyber security skills base to match, with both the government and private sector affected by the shortage in skills". 
 
The Government must work in close partnership with industry, as well as with academia, to put in place a range of measures to meet short-term demand and develop a pipeline of specialists in the longer term. 
 
The Report identified several key measures that form part of the solution, including:
  • Using education, both inside and outside the classroom, to create a strong foundation for the future skills base. Despite a promising array of Government initiatives in this regard, the scale of these efforts does not yet match the scale of demand;
  • Industry being more creative in terms of how it recruits and reskills employees, albeit with Government support, given the importance of CNI to national security;
  • Professionalising the relatively immature cyber security industry, through achieving Royal Chartered status, which would also go some way towards raising the industry’s profile and making it a more attractive career option to more people. However, care must be taken that professionalisation does not inadvertently lead to exclusion; 
  • Identifying not only a lead Department (which is the Department for Digital, Culture, Media and Skills), but robust mechanisms for cross-government coordination and cooperation, clear lines of accountability, and a Minister with clear lead responsibility for the development of cyber security skills.
 
Parliament:         RedSeal:           NetImperative:      ITPro
 
You Might Also Read:
 
Closing The Skills Gap Starts At School:
 
UK Workforce Lacks Basic Cyber Training:
 
 
 
« Police Launch Global Attack On Islamic State
Easy Cyber Knowledge Chapter 6: Future Cyber Predictions »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

CyberDefenses

CyberDefenses

CyberDefenses services combine best-in-class cybersecurity oversight, managed services and training to help our clients truly address their cybersecurity challenges.

Foregenix

Foregenix

Foregenix are global specialists in Digital Forensics and information security including Penetration testing and Website Security.

Cybersecurity Credentials Collaborative (C3)

Cybersecurity Credentials Collaborative (C3)

C3 provides a forum for collaboration among vendor-neutral information security and privacy and related IT disciplines certification bodies.

Data61

Data61

Data61 is Australia’s leading digital research network offering the research capabilities, IP and collaboration programs to unleash the country’s digital & data-driven potential.

Snode Technologies

Snode Technologies

Snode's Guardian cybersecurity platform uses AI and machine learning to monitor, detect and proactively respond to all threats on every device within your network.

Jump Capital

Jump Capital

Jump provides series A and B capital to data-driven tech companies within the FinTech, IT & Data Infrastructure, B2B SaaS and Media sectors.

Inspira Enterprise

Inspira Enterprise

Inspira Enterprise is a leading digital transformation company with expertise in Cyber Security, Internet of Things (IOT), Blockchain, Big Data & Analytics, Intelligent Automation and Cloud Computing.

Center for Medical Device Cybersecurity (CMDC) - University of Minnesota

Center for Medical Device Cybersecurity (CMDC) - University of Minnesota

CMDC’s mission is to foster university-industry-government partnerships to assure that medical devices are safe and secure from cybersecurity threats.

Midwest Cyber Security Alliance (MCSA)

Midwest Cyber Security Alliance (MCSA)

Midwest Cyber Security Alliance is a nonprofit, nonpartisan collaboration of individuals, businesses, government entities, and professionals advocating for more effective cyber security solutions.

NXTsoft

NXTsoft

NXTsoft’s solutions help businesses secure, connect and optimize their data to maximize revenue opportunities, enhance profitability, and mitigate cybersecurity risk.

Ward Solutions

Ward Solutions

Ward Solutions are an information security consultancy and managed services company. We help organisations protect their brand, people, assets, intellectual property and profits.

Secrutiny

Secrutiny

Scrutiny's core services include Cyber Maturity, Cyber Risk Analyser, Cyber Controls, Incident Response, SOC, Cyber Recovery and Assurance Testing.

Upstack

Upstack

UPSTACK - One partner, end-to-end expertise, helping develop the solutions you need – when you need them.

Bitdefender

Bitdefender

Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide.

Cytek

Cytek

Cytek is a leading provider of cybersecurity and HIPAA compliance for dental practices and other industries.

Roberts & Obradovic Law

Roberts & Obradovic Law

Roberts & Obradovic Law Group is a corporate, privacy, employment and litigation law firm.