The cybersecurity skills gap needs time and investment to address

Editor's Choice

28 February 2023 Editor's Choice

By Simeon Tassev, MD, Galix Networking.

Across the IT industry there is a significant skills gap, which is even more significant when it comes to the cybersecurity subsection. However, as data becomes increasingly valuable and an increasingly more attractive target for cybercriminals, and data protection regulations more stringent, this is one area that needs to be addressed as a matter of priority. This will require both time and investment, and there is no quick fix.

One of the reasons for this skills gap is that cybersecurity is a highly specialised field, which means that it requires a significant level of skill and experience across multiple areas to reach proficiency. Cybersecurity touches not only data but also hardware, networking, operating systems, applications and more, and requires an in-depth understanding and the ability to script and code.

There is also no linear path to becoming a specialist in cybersecurity, but it is a highly technical and complex career path that requires solid foundations in all areas of IT, and certifications across many of these areas. The field is also constantly evolving, which requires a mindset of continuous learning.

Cybersecurity is also an area where theoretical knowledge can get a person only so far. The true value comes from experience, which is difficult to obtain in the real world. There is a conundrum where we need cybersecurity professionals, and we need them to have skills and experience, but allowing them to learn and make the mistakes necessary to get this experience could be detrimental.

The challenge for many cybersecurity professionals is that it takes time to pass knowledge on, and letting people learn under supervision takes longer than simply solving the problem. Organisations that specialise in cybersecurity need to find creative ways of helping to build out skills and experience to address this widening gap. This also needs to involve a significant mentorship component to allow people to gain the experience they need in a safer environment.

When it comes to accessing cybersecurity skills, it is often more beneficial to outsource this service, rather than trying to maintain it in-house. Not only are skilled cybersecurity professionals scarce (which also means expensive) they are also difficult to retain and they tend to specialise in certain areas rather than generally across the very wide field.

Outsourcing cybersecurity generally results in a better security posture, because you can access a broad pool of skills and specialists across many areas. In addition, these outsourced partners are in a better position to be the mentors and teachers needed to help address the skills gap, which will eventually contribute to a growing pool of skills.

In cybersecurity, the major focus needs to be on growing the skills pool. For businesses, an outsource provider can deliver enhanced security and reduce risk. For those looking to enter this field, working with a cybersecurity outsource provider can help with access to learning and mentorship needed to enter this dynamic, complex and highly technical field.

Share this article:

Categories

Editor's Choice

The cybersecurity skills gap needs time and investment to address

Further reading:

Publications by Technews