The shortage of skilled cyber-security professionals continues to be a major challenge in the industry, according to a recent survey conducted by the Information Systems Security Association (ISSA) and Enterprise Strategy Group (ESG). The survey found that 76% of respondents reported facing significant or moderate challenges in recruiting and hiring security experts. Furthermore, 95% of respondents believe that the skills shortage has not improved in recent years, with 44% indicating that it has actually worsened.
The competition for top cybersecurity talent is fierce, and the cost of building a highly skilled security team can be high due to the scarcity of expertise. As a result, many security teams are understaffed and stretched thin, lacking the necessary knowledge to navigate the increasingly complex threat landscape. This puts immense pressure on these teams, leading to burnout and stress.
The consequences of this stress are not only unhealthy for individuals but also pose a risk to the businesses they are tasked with protecting. More than half of the organizations surveyed expressed concerns that the stress and fatigue experienced by their security teams could increase the risk of a cyber-incident. Additionally, 51% of respondents believed that their security teams were challenged and frustrated, which could lead to mistakes, burnout, and increased turnover. Furthermore, 28% felt that these factors constrained their teams’ ability to innovate and introduce creative solutions.
Cyber-security professionals often work long and exhausting hours, driven by their passion and dedication to protecting their organizations. However, this dedication also contributes to the elevated stress they experience. Many organizations recognize the knowledge gaps within their security teams, with 42-45% reporting that their teams have little or no expertise in understanding threats, detecting and responding to potential threats, controlling exposure across the IT estate, responding effectively to incidents, and measuring success.
Closing this skills gap and reducing stress among current teams is challenging for several reasons. Adarma’s research revealed that 60% of leaders see the lack of a security budget as a significant barrier to recruiting and retaining skilled professionals. Additionally, 58% struggle to communicate the importance of security to their organization’s C-suite and board members, making it even harder to secure budgets.
However, there are potential solutions to these challenges. Sixty-five percent of security operations leaders believe that recruiting from a broader, more diverse talent pool could help alleviate stress. Additionally, 35% said they would consider using a third-party security provider, such as a managed security service provider (MSSP), to introduce diversity and lighten the load. Outsourcing security needs to an MSSP can provide access to a diverse set of talents and expertise.
Investing in initiatives that support the well-being and mental health of team members, such as workplace well-being programs, can also enhance the experience of existing teams, improve their engagement and job satisfaction, and ultimately lead to better retention rates and reduced potential for errors.
For more information, visit www.adarma.com. You can also read the full report here.
About Adarma:
Adarma is a leader in detection and response services, specializing in designing, building, and managing cyber-security operations that reduce business risk. Their team works closely with customers to mitigate risk and maximize the value of their cyber-security investments. With their integrated set of services, including managed detection and response, Adarma improves security posture and delivers the cyber-security outcomes organizations need. They operate with transparency and visibility across hybrid-SOC environments to protect customers as they innovate, transform, and grow their businesses.
(Note: The survey was completed between 15 and 22 May 2023.)