Flexible work conditions can help decrease the cybersecurity workforce gap by creating more inclusive environments. Practices like work from home and flexible office hours allow companies to widen their recruitment pool. The increase of work from home has been on the move for years, but was escalated in 2020 with the start of the COVID-19 pandemic. Those with transportation challenges, physical limitations, family obligations, or other situations that made the traditional nine-to-five feel previously difficult are now finding themselves able to thrive with more flexible work conditions.
In the latest (ISC)² Workforce Study, respondents were asked “How can cybersecurity diversify?” The second-highest response, 29% suggested providing more flexible working conditions. This response was topped only by providing mentorships and support at all job levels, 30% and followed by diversifying management and hiring team practices 27%.
“Diversity includes men, women and others that are there to just be engaged in the conversation, to learn how we are recruiting. Working in teams and embracing remote hiring practices is helping to identify diverse candidates to join the cybersecurity division.” (Market Research - In Their Own Words Women and People of Color Detail Experiences Working in Cybersecurity) Intentional hiring practices for diverse working groups and committees actively ensure that your workforce has a mix of individuals from different genders, ethnic backgrounds, ages and experience levels, among other diversity characteristics. These inclusive environments have higher rates of retention, a more diverse thought pool and can increase productivity.
Inclusive recruitment practices are necessary to fill the cybersecurity workforce gap, but retention is also a key factor. “With respect to people, participants placed by far the greatest emphasis on the development and retention of existing staff, with 42% of respondents globally naming it as having the greatest impact on shrinking the cybersecurity workforce gap.” (2021 Cybersecurity Workforce Study) When organizations were asked about plans in 2022 to address their workforce gaps, respondents cited ten areas of anticipated people-centered investments. Included in the top two people investments was to provide more flexible working conditions.
Flexible work conditions are favorable for employees, but they do not come without concern for employers. “Participants cited numerous benefits of working remotely, including stronger bonds between teams, a renewed sense of mission and better communication. When asked what their organization could do to help address its own skills gap, participants cited flexible working conditions.” (2021 Cybersecurity Workforce Study) With an increased demand for work-from-home options, companies are contending with new threats and protecting broader attack surfaces which adds a new dimension to their already challenging jobs.
Despite these increased threats, the 2021 Cybersecurity Workforce Study stated, "When feasible, organizations should fully embrace remote work for their cybersecurity teams. Many cybersecurity professionals want to continue working remotely, but more importantly, remote work enables organizations to cast a much wider net geographically when recruiting, which also fosters a more diverse pool of applicants.”