I’ve written a lot about the cybersecurity skills shortage lately based upon data from a new research report titled, The Life and Times of Cybersecurity Professionals, a collaborative effort done by ESG and the information systems security association (ISSA). The report indicates that:
- Seventy percent of cybersecurity professionals believe their organizations have been impacted by the cybersecurity skills shortage.
- What type of impact? Sixty-three percent say the cybersecurity skills shortage has increased the workload on existing staff, 41 percent have had to hire junior personnel in lieu of more experienced staff, and 41 percent claim the cybersecurity staff spends a disproportional amount of time on incident response and limited time on planning and strategy.
- The areas where the skills shortage is most acute include security investigations/analysis (31 percent), application security (31 percent), and cloud security (29 percent).
