机构研究报告-Cybersecurity skills gaps-外文版培训课件

DIGITAL

&

TRENDSCybersecurityskillsgapsCHAPTER

01OverviewInformationsecurityproductsandservicesmarketrevenueworldwidefrom2011to2024(inbillionU.S.dollars)Totalrevenueglobalinformationsecuritymarket2011-2024250200150210188.1172.5150.41133.78120.93114.15101.5410050082.23201675.67267.261.8552011201220132014201520172018201920202021202220232024*3Description:Theinformationsecuritymarkethasincreasedconsiderablyoverthepastyears.In2024,therevenueofthesecuritytechnologyandservicesmarketworldwideisexpectedtopeakat210billionU.S.dollars.Informationsecurityreferstothepracticeofmanagingaccesstoinformation,whetherthatissecuringinformationfromunauthorizedaccessorverifyingtheidentityofthosewhoclaimtohaveauthoritytoaccessinformation.ReadmoreNote(s):Worldwide;2011to2024;*Forecast.ReadmoreSource(s):GartnerEnd-userspendingoninformationsecurityworldwidefrom2013to2025,bysegment(inmillionU.S.dollars)End-userspendingoninformationsecurityworldwide2023-2025,bysegmentSecuritysoftwareSecurityservicesNetworksecurity250,000200,000150,000100,00050,000020232024*2025*4Description:Globalend-userspendingoninformationsecurityisforecasttogrowinthecomingyears,increasingfromaround162billionU.S.dollarsin2023toover211billionU.S.dollarsin2025.Mostspendinghasbeenconcentratedonsecurityservices,expectedtoexceed100billionU.S.dollarsby2025.ReadmoreNote(s):Worldwide;2024;*ForecastReadmoreSource(s):GartnerGrowthrateofend-userspendingoninformationsecurityworldwidefrom2013to2025,bysegment(inmillionU.S.dollars)Growthrateofspendingoninformationsecurityworldwide2023-2025,bysegmentSecuritysoftwareSecurityservicesNetworksecurityTotal18%16%14%12%10%8%15.6%15.1%15.1%14.2%13.6%13.6%13.6%13.4%13.1%12.7%9.6%6.2%6%4%2%0%20232024*2025*5Description:End-userspendingoninformationsecurityisforecasttogrowinthecomingyears.Networksecurity,inparticular,isexpectedtobethefastest-growingsegmentintheinformationsecuritymarket,whilethesecuritysoftwareandthesecurityservicessegmentsshouldgrowatarelativelysteadypace.Overall,thesourceexpectsthetotalinformationsecurityspendingtoincreasebyaround15percentin2025comparedto2024.

ReadmoreNote(s):Worldwide;2024;*Forecast.ReadmoreSource(s):GartnerMaintechnologiesshapingtheglobalcyberthreatlandscapeworldwidein2025Toptechnologiesshapingtheglobalcyberthreatlandscapeworldwide202580%70%60%50%40%30%20%10%0%67%66%59%58%42%GenAICloudtechnology(eithermulti-cloudorsingle)SaaSConnectedproductsQuantumcomputing6Description:Whenaskedaboutwhichtechnologiesweregoingtoshapetheglobalcyberthreatlandscapein2025,67percentofrespondentsamongbusinessandtechleadersworldwidehighlightedGenerativeAI(GenAI).Inaddition,two-thirdsofrespondentsmentionedcloudtechnology.ReadmoreNote(s):Worldwide;MaytoJuly2024;4,042respondents;BusinessandtechleadersSource(s):PwC;PwCIndiaCHAPTER

02Budgets&prioritiesCybersecuritybudgetchangesforcompaniesworldwide2025Cybersecuritybudgetchangeforcompaniesworldwide202535%30%30%25%20%15%10%5%27%12%8%0%Increaseby5%orlessIncreaseby6%-10%Increaseby11%-14%Increaseby15%ormore8Description:Ina2024survey,30percentofbusinessandtechnologyexecutivessurveyedforthestudyexpectedtheircompany'scyberbudgettoincreasebetweensixandtenpercentin2025.Overall,77percentofrespondentsworldwideanticipatetheirorganization'scybersecuritybudgettoincreasein2025.ReadmoreNote(s):Worldwide;MaytoJuly2024;4,042respondents;businessandtechnologyleaders.Source(s):PwC;PwCIndiaCybersecurityinvestmentprioritiesforbusinessleadersworldwidein2025Cybersecurityinvestmentprioritiesforbusinessleadersworldwide202560%48%50%40%30%20%10%0%43%34%30%20%Dataprotectionordatatrust

Modernizationoftechnology,includingcyberinfrastructureOngoingsecuritytrainingOngoingimprovementsinrisk

Remediationintheaftermathposturebasedoncyberroadmapofrecentcyberbreachesorintrusionsintotheorganizationorindustry9Description:Whenaskedabouttheircybersecurityinvestmentprioritiesfor2025,nearlyhalfofrespondentsamongbusinessleadersworldwidehighlighteddataprotectionordatatrust.Inaddition,43percentofrespondentswereplanningtoprioritizetechnologymodernization,includingcyberinfrastructure.Overall,34percentofrespondentsnamedongoingsecuritytrainingatopinvestmentpriorityfor2025.ReadmoreNote(s):Worldwide;MaytoJuly2024;4,042respondents;businessleadersSource(s):PwC;PwCIndiaCybersecurityinvestmentprioritiesfortechleadersworldwidein2025Cybersecurityinvestmentprioritiesfortechleadersworldwide202540%34%35%30%25%20%15%10%5%28%26%23%22%0%CloudsecurityDataprotectionordatatrustGenAI/machinelearningOperationaltechnology(OT)securityCybermanagedservices10/statistics/1550040/tech-leaders-cyber-security-investment-priorities-worldwideWhenaskedabouttheircybersecurityinvestmentprioritiesfor2025,34percentofrespondentsamongtechleadersworldwidehighlightedcloudsecurity.Inaddition,28percentofrespondentswereplanningtoprioritizedataprotectionordatatrust.ReadmoreNote(s):Worldwide;MaytoJuly2024;4,042respondents;TechleadersSource(s):PwC;PwCIndiaMaincybersecurityobjectivesofcompaniesworldwidein2025Topbusinesses'cybersecurityobjectivesworldwide202540%35%36%31%30%29%30%25%20%15%10%5%23%0%FasterresponsetimestoincidentsanddisruptionsImprovedconfidenceofleadersinabilitytomanagepresentandfuturethreatsImprovedcustomerandemployeeexperienceGreateruseofcybermanagedservicesSupportinthewayofresourcesandcollaborationwiththeCISO11Description:Whenaskedaboutthemaincybersecurityobjectivesfortheircompanyin2025,36percentofrespondentsamongbusinessandtechleadersworldwidehighlightedfasterresponsetimestoincidentsanddisruptions.Inaddition,over30percentofrespondentsmentionedimprovedconfidenceamongleadersintheirabilitytomanagepresentandfuturethreats.ReadmoreNote(s):Worldwide;MaytoJuly2024;4,042respondents;BusinessandtechleadersSource(s):PwC;PwCIndiaCHAPTER

03CybersecurityworkforceSizeofcybersecurityworkforceworldwidein2024,byregion(in1,000s)Numberofcybersecurityprofessionalsworldwide2024,byregionNumberofprofessionalsinthousands02004006008001,0001,2001,4001,600NorthAmericaEurope1,454.871,300.02LATAM1,273.87APAC997.07MiddleEast&Africa431.313Description:Thenumberofprofessionalsworkinginthecybersecurityindustrywasestimatedtobeover1.3millioninEuropein2024.Thenumberofcybersecurityprofessionalsgloballystoodat5.46millionthatyear.Cybersecurityprotectscomputerinformationsystems,hardware,networks,anddatafromcyberattacks.Asawarenessofcyberthreatsisrising,soisthesizeoftheglobalcybersecuritymarket.

ReadmoreNote(s):Worldwide;2024Source(s):ISC2Companies'cybersecuritystaffingworldwidein2023versus2024Companies'cybersecuritystaffingworldwide2023vs.2024202338%202450%45%40%35%30%25%20%15%10%5%46%43%36%14%13%2%2%2%2%1%1%0%Significantlyunderstaffed

SomewhatundestaffedAppropriatelystaffedSomewhatoverstaffed

SignificantlyoverstaffedNotapplicable14Description:Overall,nearly60percentofrespondentsstatedthattheircompanywasunderstaffedintermsoftheircybersecurityworkforceinboth2023and2024,although14percentofrespondentsdeclaredtheircompanywassignificantlyunderstaffedintermsofcybersecurityin2024,aslightincreasecomparedto2023.Bycontrast,onlythreepercentofrespondentsstatedthattheircompanyhadasurplusofcybersecurityprofessionals.

ReadmoreNote(s):Worldwide;Q22024;1,868respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitles.Source(s):ISACACybersecurityworkforcegapworldwidein2024,byregion(in1,000s)Cybersecurityworkforcegapworldwide2024,byregion4,0003,374.583,5003,0002,5002,0001,5001,000500542.69392.32Europe328.4124.980APACNorthAmericaLATAMMiddleEast&Africa15Description:TheAsia-Pacificregionwitnessedthelargestcybersecurityworkforcegapin2024,asover3.37millionITsecurityprofessionalswerestillneededinthemostpopulouscontinent.Globally,acybersecurityworkforcegapofaround.47millionrequiredtobefilled.ReadmoreNote(s):Worldwide,NorthAmerica,Europe,APAC,LAC;2024Source(s):ISC2Futurehiringdemandincybersecurityworldwidebyjobtypein2024Futurehiringdemandincybersecurityworldwidebyjobtype2024ShareofrespondentsDecrease10%Nochange20%Increase30%0%40%50%60%70%80%3%Individualcontributor/technicalcybersecurityIndividualcontributor/nontechnicalcybersecurityCybersecuritymanager23%73%8%46%45%5%47%48%6%Seniormanager/directorofcybersecurityExecutiveorC-suitecybersecurity(CISO)56%38%6%63%32%16Description:Overall,thedemandforcybersecurityrolesisexpectedtoincreasein2024.Over73percentofrespondentsprojectedanincreaseinthefuturehiringofindividualcontributorsortechnicalcybersecuritystaff.Bycontrast,onlysixpercentofrespondentsexpectedadecreaseddemandforexecutiveorC-suitecybersecuritypersonnel.ReadmoreNote(s):Worldwide;Q22024;1,868respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitles.Source(s):ISACAITsecurityskillsshortageworldwidein2024,byjobtypeGlobalITsecurityskillsshortage2024,byjobShareofrespondents0%5%10%15%20%25%30%35%35.4%40%ITsecurityadministratorITsecurityanalyst/operator/incidentresponderITsecurityarchitect/engineerITsecurity/complianceauditorDevSecOpsengineer32.4%32.3%26.1%25.6%Risk/fraudanalyst25%Applicationsecuritytester24.6%17Description:Over35percentofrespondentsworldwideexpectedthebiggestshortageregardingITsecurityskillstobeforITsecurityadministratorsin2024.Bycontrast,onlyaround25percentofrespondentsconsideredlackingriskandfraudanalysts.

ReadmoreNote(s):Worldwide;November2023;1,200respondents;RespondentswhohaveanITsecurityjobroleinanorganizationwithmorethan500employeesSource(s):CyberEdge;ISC2(ISC2Foundation)Attendanceofcybersecuritytrainingbyemployeesworldwidein2024,bytypeGlobaluseofcybersecuritytrainingbyemployees2024,bytypeShareofrespondents10%

15%0%5%20%25%30%35%40%45%45%50%Computer-basedtrainingNewsletterandemails38%37%In-persontrainingSimulatedphishingattacks34%34%Virtual,instructor-ledtrainingCybersecurity-basedcontestsandprizesSmishingandvishingsimulationsAwarenesspostersandvideosInternalcybersecuritychatchannelSimulatedUSBdrops33%32%31%30%23%23%InternalwikiMycompanydoesnothaveasecurityawarenessprogram1%18Description:A2024surveyofendusersandITsecurityprofessionalsworldwidefoundthatcomputer-basedsecurityawarenesstrainingwasthemostpopularamongtherespondents.Additionally,around37percentattendedin-personcybersecuritytrainings,whileanother34percentofrespondentsmentionedhavingtakenpartinvirtual,instructor-ledtrainings.ReadmoreNote(s):Worldwide;2024Source(s):ProofpointFactorsdeterminingqualificationforacybersecurityjobworldwidein2024Factorsdeterminingqualificationforacybersecurityjobworldwide2024VeryimportantSomewhatimportantNotveryimportantNotatallimportantDon'tknow80%70%60%50%40%30%20%10%0%73%54%51%38%46%46%37%34%27%25%23%22%21%20%16%15%9%8%7%5%4%4%3%3%3%2%2%

2%Hands-ontraining1%1%Priorhands-oncybersecurityexperienceCredentialsEmployerrecommendationUniversitydegreeAssociationmembership19Description:In2024,priorhands-oncybersecurityexperiencewasconsideredtheprimaryfactorindeterminingwhetheracandidatewasqualifiedforacybersecurityjob.Bycontrast,nearly40percentofrespondentsstatedthatanassociationmembershipwasnotanimportantfactorinthequalificationofacandidate.ReadmoreNote(s):Worldwide;Q22024;1,868respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitles.Source(s):ISACACHAPTER

04SkillsgapsMostsoughtskillsincybersecurityprofessionalsbyhiringmanagersworldwidein2024Topskillssoughtincybersecurityprofessionalsbyhiringmanagersworldwide2024Shareofrespondents10%0%5%15%20%25%30%35%Strongproblem-solvingabilitiesTeamworkandcollaborationskillsCuriosity/eagernesstolearn31%28%26%25%StrongcommunicationskillsCloudcomputingsecurity19%Strongstrategicthinkingskills17%Riskassessment,analysisandmanagementSecurityengineering14%14%Governance,riskmanagementandcompliance(GRC)Artificialintelligence/machinelearning(AI/ML)StrongprojectmanagementskillsSecurityanalysis13%12%12%11%11%Timemanagementandorganization21Description:Themostsoughtskillamongcybersecurityprofessionalsin2024wasstrongproblem-solvingabilities,ashighlightedbyover30percentofrespondentsamongcybersecurityprofessionalswithhiringauthorityworldwide.Atthesametime,28percentofrespondentsconsideredteamworkandcollaborationskillsasoughtattribute.Ontheotherhand,onlysevenpercentofrespondentsconsideredleadershipabilitiestobeanimportantqualificationforcybersecurityprofessionalsin2024.

ReadmoreNote(s):Worldwide;ApriltoMay,2024;7,698respondents;cybersecurityprofessionalswithhiringauthoritySource(s):ISC2Mostimportantsoftskillsneededbysecurityprofessionalsincompaniesworldwidein2024Softskillsneededbysecurityprofessionalsworldwide2024Shareofrespondents0%10%20%30%40%50%60%Communication(listening/speakingskills)56%Criticalthinking54%Problem-solving50%Teamwork(includescollaborationandcooperation)AttentiontodetailAdaptabilitytochangeDecisionmakingAttitude44%35%35%29%26%LeadershipqualitiesTimemanagementWorkethic28%27%25%Writingskills19%ConflictresolutionHonesty21%15%Empathy11%22Description:In2024,56percentofrespondentsfirstlistedcommunicationskills,suchaslisteningandspeaking,whenaskedwhichsoftskillstheircompanyrequiredthemost.Only15percentofrespondentsselectedhonestyasoneofthetopsoftskillssecurityprofessionalsshouldhavein2024.ReadmoreNote(s):Worldwide;Q22024;1,868respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitles.Source(s):ISACA;LookingGlassMostimportantsecurityskillsrequiredincompaniesworldwidein2024Topcybersecurityskillsworldwide2024Shareofrespondents0%5%10%15%20%25%30%35%40%45%50%DataprotectionIdentityandaccessmanagement(IAM)Incidentresponse46%45%44%43%CloudcomputingThreatdetectiontechnologies(IDS,IPS,UTM)Datacollectionandcorrelation(SIEM,SOAR)Endpointsecurity(EDR,XDR)DevSecOps31%30%29%28%27%27%26%25%VulnerabilityscanningPenetrationtestingThreathuntingVulnerabilitydiscoveryForensics18%23Description:In2024,whenaskedwhichsecurityskillsarethemostimportanttotheircybersecurityorganizations'needs,46percentofrespondentsplaceddataprotectionintheirtopfiverequiredskills.Anotherskilllistedby30percentoftherespondentswasdatacollectionandcorrelation(SIEM,SOAR).ReadmoreNote(s):Worldwide;Q22024;1,868respondents;CybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitles.Source(s):ISACABiggestskillgapsamongcybersecurityprofessionalsin2024Skillgapsamongcybersecuritypersonnelworldwide2024Shareofrespondents0%10%20%30%40%50%60%Softskills(communication,flexibility,leadership)51%Cloudcomputing42%Securitycontrols(endpoint,network,application,implementation)35%Softwaredevelopment-relatedtopics(languages,machinecode,testing,…28%Codingskills27%26%26%24%24%22%21%Data-relatedtopics(characteristics,classification,collection,processing,structure)Networking-relatedtopics(architecture,addressing,networkingcomponents)LLMSecOpsMLSecOpsSystemhardeningNetworkoperations(configuration,performancemonitoring)Patternanalysis18%Computingdevices(hardware,software,filesystems)Donotknow10%10%Other(pleasespecify)4%24Description:Softskillssuchascommunication,flexibility,andleadershipwereconsideredtobethebiggestskillgapamongcybersecurityprofessionalsin2024.Additionally,24percentofrespondentsmentionedlargelanguagemodels(LLM)SecOpsandmachinelearningSecOpsastheareaswiththelargestskillgaps.ReadmoreNote(s):Worldwide;Q22024;1,868respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitles.Source(s):Adobe;ISACAMostin-demandtechnicalcybersecurityskillsworldwidein2024Mostin-demandtechnicalcybersecurityskillsworldwide2024HiringmanagersNon-hiringmanagers60%50%40%30%20%10%0%48%37%36%33%30%28%27%26%25%25%24%24%24%19%CloudcomputingsecuritySecurityengineeringRiskassessment,analysisandmanagementApplicationsecuritySecurityanalysisGovernance,riskmanagementand

intelligence/machinecompliance(GRC)

learning(AI/ML)Artificial25Description:In2024,whenaskedaboutthemostsought-aftertechnicalcybersecurityskillswithintheirorganization,36percentofrespondentsamonghiringmanagersandnearly50percentamongnon-hiringmanagershighlightedcloudcomputingsecurity.Artificialintelligenceandmachinelearningrankedsecondamongnon-hiringmanagers,mentionedby37percentofrespondents,while28percentofrespondentsamonghiringmanagersmentionedsecurityengineering.

ReadmoreNote(s):Worldwide;ApriltoMay,2024;15,852respondents;globalcybersecurityprofessionals.Source(s):ISC2Cybersecurityareaswhereprofessionaldevelopment/trainingismostneededin2024,bycareerstageCybersecurityareaswhereprofessionaltrainingismostneeded2024,bycareerstageShareofrespondentsCurrentworkforceEarlycareer0%Universitygraduate10%

20%30%40%50%60%70%35%Securitycontrols(endpoint,network,application,implementation)Softskills(communication,criticalthinking,flexibility,leadership)58%59%51%55%64%42%44%Cloudcomputing38%40%26%Networking-relatedtopics(architecture,addressing,networkingcomponents)43%41%38%21%22%Networkoperations(configuration,performancemonitoring)35%Systemhardening31%28%26%Data-relatedtopics(characteristics,classification,collection,processing,structure)35%18%Patternanalysis21%24%28%25%27%Softwaredevelopment-relatedtopics(languages,machinecode,testing,…21%Codingskills18%21%10%Computingdevices(hardware,software,filesystems)17%20%24%24%MLSecOpsLLMSecOpsOther14%17%17%12%4%3%9%26Description:Forthissurveyconductedin2024,respondentswereaskedabouttherequiredprofessionaltrainingofcybersecuritystaffaccordingtotheircareerstage.Nearlysixin10respondentsnamedsecuritycontrolsasoneoftheareaswheretrainingwasneededthemostforuniversitygraduatesorearlycareerprofessionals.Softskillssuchascommunication,criticalthinking,andflexibilitywerecloselyfollowed,with64percentofrespondentsstatingtheneedforsuchtrainingforuniversitygraduates.ReadmoreNote(s):Worldwide;Q22024;1,868respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitles.Source(s):ISACA;LookingGlassMainreasonsforskillsgapsamongcybersecurityteamsworldwidein2024Reasonsforskillsgapsamongcybersecurityteamsworldwide2024Shareofrespondents0%5%10%15%20%25%30%35%33%Myorganizationdoesn’thavethebudgettohireenoughpeopleMyorganizationcan’tfindpeopletohirewiththeskillsweneedIngeneral,westruggletokeeppeoplewithin-demandskillsMyorganizationhasgapsinemergingtechnologyareas30%27%27%26%IToftenintroducesnewtechbutdoesn’thavetheexpertisetosecureit27Description:In2024,whenaskedaboutthemainreasonsexplainingtheskillsgapswithintheirorganization'scybersecurityteam,one-thirdofrespondentsstatedthattheircompanydidnothavethebudgettohireenoughpeople.Inaddition,30percentofrespondentsmentionedtheircompany'sstruggletofindpeopletohirewiththeneededskills.Overall,27percentofrespondentsconsideredgapsinemergingtechnologyareasasthemaincauseforskillsgapswithintheircompany.ReadmoreNote(s):Worldwide;ApriltoMay,2024;12,069respondents;

globalcybersecurityprofessionalsglobalcybersecurityprofessionalsglobalcybersecurityprofessionalsglobalcybersecurityprofessionals.Source(s):ISC2Skillsgapsamongrecentuniversitygraduatesworldwidein2023vs.2024Skillsgapsamongrecentuniversitygraduatesworldwide2023vs.2024Shareofrespondents20240%202310%20%30%40%50%60%70%80%64%Softskills(e.g.,communication,flexibility,leadership)Securitycontrols(e.g.,endpoint,network,applicationimplementation)Networking-relatedtopics(e.g.,architecture,addressing,networkingcomponents)Networkoperations(e.g.,configuration,performancemonitoring)Systemhardening68%59%54%43%41%34%39%38%36%33%35%Data-relatedtopics(e.g.,characteristics,classification,collection,processing,…Softwaredevelopment-relatedtopics(e.g.,languages,machinecode,testing,…Patternanalysis25%25%24%25%20%Codingskills21%19%Computingdevices(e.g.,hardware,software,filesystems)LLMSecOps20%17%17%MLSecOps10%9%Other(pleasespecify)28Description:Softskillssuchascommunication,flexibility,andleadershipwerementionedtobethebiggestskillgapamongrecentcybersecurityuniversitygraduatesinboth2023and2024.Securitycontrolsfollowed,highlightedbynearly60percentofrespondentsin2024,anincreasecomparedto2023.ReadmoreNote(s):Worldwide;Q22024;1,868respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitles.Source(s):ISACA;LookingGlassTechnicalareaswiththegreatestskillgapsintheUnitedStatesin2024ITareaswiththegreatestskillgapsintheUnitedStates2024Shareofrespondents0%5%10%15%20%25%30%35%40%45%50%CybersecuritySoftware45%37%Data32%InfrastructureITsupport31%28%29Description:In2024,cybersecuritywastheITfieldwiththehighestskillshortage,accordingto45percentofITprofessionalsintheUnitedStates.Softwareroleshadthesecond-highestskillshortage,followedbydataroles.ReadmoreNote(s):UnitedStates;October2024;504respondents;ITprofessionalsSource(s):CompTIACHAPTER

05OtherchallengesMostimportantreasonswhycompaniesareexperiencingashortageofcybersecuritystaffworldwidein2024Reasonswhycompaniesworldwidearefacingashortageofcybersecuritystaff2024Shareofrespondents0%

5%10%15%20%25%30%35%40%39%45%Myorganizationdoesn'thavethebudgetMyorganizationcan'tfindenoughqualifiedtalent35%Myorganizationdoesn'tpayacompetitivewage28%Myorganizationisstrugglingtokeepupwithturnover/attritionMyorganizationcan'tofferopportunitiesforgrowth/promotionforsecuritystaff23%22%31/statistics/1357986/global-reasons-for-cybersecurity-staff-shortageIn2024,themostimportantreasonwhycompaniesworldwidewereexperiencingashortageofcybersecuritystaffwasaninsufficientbudget.Atthesametime,28percentofrespondentsstatedthattheircompanydidnotpayacompetitivewage.

ReadmoreNote(s):Worldwide;AprilandMay,2024;6,270respondents;globalcybersecurityprofessionals.Source(s):ISC2Factorsforresigningfromcybersecurityjobworldwidein2024Factorsforresigningfromcybersecurityjobworldwide2024Shareofrespondents0%10%20%30%40%50%60%RecruitedbyothercompaniesPoorfinancialincentives(e.g.,salariesorbonuses)LimitedpromotionanddevelopmentopportunitiesHighworkstresslevels50%50%46%46%Lackofmanagementsupport34%Poorworkculture/environmentLimitedremoteworkpossibilities32%32%Inflexibleworkpolicies22%Limitedopportunitiestoworkwithlatesttechnologies(e.g.,AI)Familysituationchanges(e.g.,childrenborn,marriage)Retirement19%15%14%13%11%DesiretoworkinnewindustrySwitchingcareers(e.g.,leavingcybersecurityentirely)32Description:Cybersecuritycompanieshavebeenfacingseveraldifficultieswithretainingtalent.Ina2024survey,halfoftherespondentssaidthatpoorfinancialincentivessuchaslowsalariesorbonusescontributedtocybersecurityprofessionalsresigningfromtheircurrentjob.Thesameshareofrespondentsmentionedrecruitmentbyothercompaniesasthemainreasoncybersecurityprofessionalslefttheirjobsin2024.

ReadmoreNote(s):Worldwide;Q22024;1,868respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitles.Source(s):ISACATimetofillacybersecuritypositionincompaniesworldwidebylevelin2024Timetofillacybersecuritypositionincompaniesworldwidebylevel2024Entry-levelNon-entry-level38%40%35%30%25%20%15%10%5%37%27%18%13%12%11%10%7%7%5%4%4%