The global cybersecurity workforce gap has seen a significant increase of 12.6% since 2022, now reaching a total of four million people. In a recent study conducted by ISC2, it was revealed that 92% of cybersecurity professionals reported having skills gaps within their organizations.
According to the study, the top three skills gaps identified were in cloud computing security (35%), artificial intelligence/machine learning (32%), and zero trust implementation (29%).
The report also highlighted that nearly half (47%) of respondents experienced cybersecurity-related cutbacks in the past year, including layoffs, budget cuts, and hiring or promotion freezes. Out of this group, 22% were directly impacted by layoffs.
Furthermore, the study found that 47% of respondents admitted to having little to no knowledge of AI and its associated risks. AI and emerging technologies were identified as the biggest challenges facing cybersecurity professionals over the next two years (45%), followed closely by worker/skill shortages (43%).
Despite these challenges, a majority (52%) of cybersecurity professionals stated that their organizations are actively encouraging the use of AI internally. They believe that advancements in AI have the third most positive impact on their ability to secure their organization, ranking behind zero-trust (34%) and automation (40%).
Mika Aalto, co-founder and CEO at Hoxhunt, emphasized the importance of purpose-built talent acquisition in addressing the cybersecurity talent gap. He suggested offering on-the-job mentoring and paying for certification courses to promising candidates, both internal and external.
Tony Goulding, cybersecurity evangelist at Delinea, advised organizations to invest in growing their existing workforce while also hiring new talent. He recommended identifying strong talent within the organization and reskilling them to nurture an in-house talent pool. Additionally, he stressed the need for organizations to keep up with new and emerging technologies and cultivate skills through internships.
Dave Ratner, CEO of HYAS, highlighted the need for organizations to balance prevention and resilience in their cybersecurity strategies. He emphasized the importance of visibility and observability solutions to detect anomalies and breaches within environments and shut down attacks before damage occurs. Ratner also stressed the need for organizational alignment and integration of security solutions to effectively respond to breaches.
Overall, the cybersecurity workforce gap presents both challenges and opportunities for organizations. By investing in talent acquisition, reskilling, and staying updated with emerging technologies, organizations can strengthen their cybersecurity programs and ensure they are prepared for future requirements.