(ISC)² Blog

ENTRY-LEVEL CYBERSECURITY JOBS KEY TO SOLVING WORKFORCE GAP

Facing an acute shortage of qualified cybersecurity professionals, hiring managers are recruiting entry- and junior-level practitioners to their teams. The latest (ISC)² research captured in our Cybersecurity Hiring Managers Guide reveals this practice enables organizations to build stronger and more resilient cybersecurity teams. The findings come from a poll of 1,250 hiring cybersecurity managers who hire entry- and junior-level practitioners for small, mid-size and large organizations in the United States, Canada, United Kingdom and India. The cybersecurity skills gap currently stands at 2.7 million worldwide, forcing hiring managers to deprioritize experience when choosing candidates who show promise. Managers are less... Read more →

How can mentorship help the cybersecurity workforce gap?

The 2021 (ISC)² Cybersecurity Workforce Study suggested that the global cybersecurity workforce needs to grow 65% to effectively defend organizations’ critical assets. To protect their systems, employees and data organizations need creative solutions for recruitment, training and retention to maintain safe operations. “Many organizations continue to repeat the mistakes of focusing their time and energy on hunting down and competing for a select few cybersecurity “All Stars” instead of strategically developing their teams at all skill levels to create a sustainable, long-term investment in their security personnel.” (2021 (ISC)² Cybersecurity Pursuers Study) The 2021 (ISC)² Cybersecurity Pursuers Study found that... Read more →

Update on (ISC)² Entry-Level Cybersecurity Certification Pilot

More than 1,400 individuals have taken the new (ISC)² entry-level cybersecurity certification exam during the pilot phase which began in January 2022. Scheduling for the pilot is currently available through August 26 and anyone interested in sitting for the “no experience required” exam may do so through an authorized Pearson VUE test center. Before a certification exam becomes fully operational, the pilot tests undergo a rigorous process of exploration, research, and validation necessary to ensure the qualification meets its intended purpose. All exams administered during the pilot phase thus far are currently undergoing this review and analysis. When the pilot... Read more →

Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 2

In the second portion of this blog series, we are sharing member stories from those with four to six years of experience in cybersecurity. We asked members about their entry into cyber from their first positions to today and what advice they have for newcomers. Do you have advice for incoming cyber professionals? Weigh in on the (ISC)² Community conversation “How to start a career in cybersecurity?” Brian Bresnahan, CISSP, Senior Security Analyst | United States Prior to migrating to a security role, I programmed voice and video systems for 15+ years. I also had extensive data center experience with... Read more →

Journey Into Cybersecurity – Conversations with Cyber Newcomers, Part 1

We recently asked our members who volunteer to engage with the (ISC)² blog about their entry into cyber and what advice they have for those interested in joining the field. These stories help us see a few unique career trajectories and how they are navigating entry and gaining experience in the cybersecurity industry. In part one of this blog, we are sharing members with three years or less of experience in cybersecurity. Do you have advice for incoming cyber professionals? Weigh in on the (ISC)² Community conversation “How to start a career in cybersecurity?” Rishipal Yadav, Senior Cybersecurity Specialist |... Read more →

(ISC)² Entry-Level Cybersecurity Certification Pilot Exam Reaches 1,000 Exam Milestone

We are excited to announce that more than 1,000 cybersecurity career hopefuls have taken their first step toward launching their careers by taking the (ISC)² entry-level cybersecurity certification pilot exam. Once they earn the certification, they will demonstrate to employers they have the foundational knowledge, skills and abilities to succeed in entry- and junior-level roles. Since the program’s inception earlier this year, more than 1,000 people around the world have taken the exam and many have registered for the (ISC)² entry-level cybersecurity certification course with their exam still to come. With the global cybersecurity workforce needing to grow by 65%... Read more →

How to Prevent Burnout Among Cybersecurity Professionals Before, During and After a Breach

By Diana-Lynn Contesti (Chief Architect, CISSP-ISSAP, ISSMP, CSSLP, SSCP), John Martin (Senior Security Architect, CISSP-ISSAP, CISM, Open Group Certified Architect Master) and Richard Nealon (Senior Security Consultant, CISSP-ISSMP, SSCP, SABSA SCF) Cybersecurity professionals are often faced with making difficult decisions under intense pressure with the potential of long-term effects on the business. Over time, this stress can weigh on cybersecurity pros and potentially cause “burnout” among employees as well as long-term psychological effects. What can be done to prevent burnout among employees and how can we support our fellow colleagues? These questions are becoming more prevalent in the industry as... Read more →

(ISC)² Advocates for Membership – Shares Opinions on Proposed UK Standards and Pathway

In 2018, the UK’s Department for Digital, Culture, Media and Sport (DCMS) funded the creation of the UK Cyber Security Council, which launched in March 2021. The UK government will look to the council as the authority on the cyber profession as it works to implement and enforce consistent standards for the industry. In January 2022, DCMS issued a public consultation on proposals to develop the cybersecurity profession in the UK. The proposal looks to provide clarity to the industry by looking at similar established fields such as accounting, law, and engineering that already have professional standards and pathways in... Read more →

Report: Cybersecurity Skills Gap Creates Vulnerabilities

Finding qualified cybersecurity personnel is never easy. Recruitment has become an even bigger challenge in the last two years as workforce shortages intensified and corporate networks expanded into employees’ homes. Worldwide, 60% of organizations say they are struggling to recruit cybersecurity talent, while 52% struggle to retain qualified people, according to a new report by Fortinet. The report is based on a survey of 1,223 IT and cybersecurity decision-makers across the globe. The struggle has a cost: 67% of respondents say the cybersecurity talent shortage creates additional risks for their organizations. Already, 80% of organizations have suffered at least one... Read more →

WINNING TACTICS FOR SECURITY AWARENESS INNOVATIONS via EXPERIENCE (1 of 2)

By Samuel Rugi, an MSc Information technology (Security), Certified Information Security Professional (CISSP), Certified Information Security Management (CISM), Cybersecurity Mentor at the Cyversity Organization and a Co-Chair Leadership LaunchPad at Technology Association of Oregon. Security awareness is becoming a hot potato for most of us in the cybersecurity sector, within our organizations, local and global communities. I have spent considerable time studying and working on this technical area as part of my duties while securing and championing best practices and behavioral change within various organizations. While this is not to claim that I am a distinguished industry expert in communication... Read more →

Summary of March Inside (ISC)2 Webinar: Stay Vigilant

As the war in Ukraine rages on, (ISC)² leaders took the opportunity to remind cybersecurity practitioners in the most recent Inside (ISC)² webinar of a simple but essential message: Be vigilant. As the hostilities continue, it is possible the war will spill over into the cyber realm, said Jon France, who joined (ISC)² in January as the organization’s first CISO. Cyber is the “fourth plain after land, sea and air” in the Ukraine war, he said. France joined CEO Clar Rosso and Board of Directors Chairperson Zachary Tudor for the quarterly webinar, during which they provided updates on the organization’s... Read more →

Report: U.S. Workers Worry About Cyberattacks

Safety is the top priority for employees in the American workplace, and one of the issues they worry about most is cyber threats. With COVID-19 still fresh on everyone’s mind, only public health emergencies rated higher than cyberattacks in a newly published report. According to the State of Employee Safety report by AlertMedia, a provider of emergency communication software, the top three threats weighing on U.S. workers are public health emergencies (79%), cyberattacks (65%) and severe weather (65%). Crime, which has been on the rise in the past two years, rated fourth, at 62%. Employers should take note of the... Read more →

What Can Flexible Work Conditions Do for Cyber?

Flexible work conditions can help decrease the cybersecurity workforce gap by creating more inclusive environments. Practices like work from home and flexible office hours allow companies to widen their recruitment pool. The increase of work from home has been on the move for years, but was escalated in 2020 with the start of the COVID-19 pandemic. Those with transportation challenges, physical limitations, family obligations, or other situations that made the traditional nine-to-five feel previously difficult are now finding themselves able to thrive with more flexible work conditions. In the latest (ISC)² Workforce Study, respondents were asked “How can cybersecurity diversify?”... Read more →

Women in Cyber Webinar - Tackling Gender Bias and Defining Success

Last year’s Celebrating International Women’s Day: Carving a Cybersecurity Career Path webinar featured a panel of accomplished women in cybersecurity for a discussion that captured the female perspective in the field. The group came together to discuss the data surrounding the demographics that make up the workforce and how they are shifting. They also shared their journeys in the profession that led them to the leadership positions they now hold, including the challenges encountered and strategies they employed to succeed. The conversation took a look ahead to the evolution of diverse cybersecurity teams and the principles that inform how they... Read more →

CELEBRATING YOUNG WOMEN IN CYBERSECURITY – WEIJIA YAN, (ISC)² UNDERGRADUATE SCHOLARSHIP RECIPIENT

The (ISC)² Scholarship Program is part of an effort to bridge the cybersecurity workforce gap—which stands at 2.72 million needed professionals—by providing future cybersecurity professionals across the globe with scholarships to prepare them for a rewarding career in this important field. At the same time, the industry urgently needs more diverse perspectives and fresh talent to tackle the challenges of today and tomorrow. With the scholarships, (ISC)² wants to create more opportunities for historically underrepresented individuals and inspire more young people to pursue a career in cybersecurity. In 2021, Weijia Yan was awarded an (ISC)² Undergraduate Scholarship which supported her... Read more →

An Entry-Level Cybersecurity Certification: Why Every Employer Should Want Their Staff to Have One

The Need for Entry-level Cybersecurity Education Is Critical As any employer who has tried to fill a vacant cybersecurity position knows, finding qualified candidates is anything but easy. The cybersecurity workforce would have to expand by 65% to meet global demand, according to (ISC)²'s 2021 Cybersecurity Workforce Study. Employers, therefore, need to keep an open mind when filling those positions by considering candidates with less experience. Once on board, however, new hires can be brought up to speed through education and certification. Even with sparse experience, a cybersecurity professional should be able to demonstrate an acceptable level of proficiency in... Read more →

(ISC)² PULSE SURVEY: LOG4J REMEDIATION EXPOSES REAL-WORLD TOLL OF THE CYBERSECURITY WORKFORCE GAP

The disclosure of the Log4j zero-day exploit in December 2021 had a serious impact on the cybersecurity industry. The flaw is found in one of the most commonly used pieces of software, thus, it could potentially impact billions of devices. If left unpatched, attackers could seize complete control of the device, which is cause for alarm. In fact, the Federal Trade Commission (FTC) threatened to use “its full legal authority to pursue companies that fail to take reasonable steps to protect consumer data from exposure as a result of Log4j, or similar known vulnerabilities in the future.” To better understand the implications of Log4j... Read more →

New Report by U.K. NCSC Highlights the Impact of Diversity on the Cybersecurity Workforce

Cybersecurity is one of many industries lacking diverse perspectives and backgrounds, which are essential for combating the ever-evolving threat landscape. (ISC)² estimates that the Cybersecurity Workforce Gap as of 2021 stands at 2.72 million professionals globally, but women make up roughly 25% of the cybersecurity industry, compared to at least 40% of the global workforce. This imbalance and lack of diversity in the sector was highlighted in the recent report In Their Own Words: Women and People of Color Detail Experiences Working in Cybersecurity. This disparity is also recognized by the U.K.’s National Cyber Security Centre (NCSC), which recently released... Read more →

Lasting Impact of the Pandemic – Lessons from the 2021 (ISC)² Workforce Study

Morale among most cybersecurity professionals remains high despite the stressors brought on by the pandemic. 29% of respondents to the (ISC)² 2021 Cybersecurity Workforce Study reported personal morale as above average, with another 26% stating it was excellent. Overall team morale was also found to be high, with 51% of respondents rating it above average, followed by 20% selecting excellent. In the past two years, the majority of employers have implemented work-from-home policies, 94% in 2021. This rapid shift that began as a public health matter has created lasting change that has workers looking to say home permanently and businesses... Read more →

THE STAKES HAVE NEVER BEEN HIGHER: HOW TO EXPAND THE CYBER WORKFORCE

A recent Forbes article pulled together a list of several cybersecurity stats that underpin the current state of the industry and threat landscape. The stats, which come from various private sector organizations, highlight the dire need for more cybersecurity professionals to keep up with adversarial threats. Some of the most alarming stats include: Cybercriminals can penetrate 93% of company networks (Positive Technologies) Businesses suffered 50% more cyberattack attempts per week in 2021 (CheckPoint Software) The threat of ransomware attacks, data breaches or significant IT outages worries companies even more than business and supply chain disruption, natural disasters or the COVID-19... Read more →