(ISC)² Blog

What do cybersecurity experts predict in 2022?

2022 Predictions for the Cybersecurity Industry and Advice for Newcomers or Those Working for Small to Medium-Sized Businesses By Diana-Lynn Contesti, CISSP-ISSAP, ISSMP, CSSLP, SSCP, John Martin, CISSP-ISSAP, CISM, BCS CITP, and Richard Nealon, CISSP-ISSMP, SSCP, SCF, CISM, CISA As long-time information security professionals and (ISC)² Community Champions, we have experienced the way cybersecurity employees engage and work with one another continue to adapt in response to changes in the workplace and world at large. In 2021, we experienced a rapid evolution to these interactions. Like us, you may be wondering, what will 2022 look like for information security professionals?... Read more →

Find A New Cybersecurity Job in 2022

The 2021 (ISC)² Cybersecurity Workforce Study revealed that the global cybersecurity workforce gap is 2.72 million. This is the number of jobs within the industry that are necessary to fill to defend critical assets. With so many cybersecurity organizations looking to fill positions, you may think to yourself, “Is cybersecurity a good industry to enter?” or “What are the pathways to cybersecurity?” and “Where would I find a cybersecurity job?” Cybersecurity Workers are Satisfied and Well-Compensated This year’s Cybersecurity Workforce Study showed that 77% of cybersecurity professionals are satisfied or extremely satisfied in their current role compared to only 49%... Read more →

(ISC)² Ransomware Study: Collaboration and Communication are Essential for Ransomware Readiness

Global C-suite executives are confident in their organizations’ preparedness to handle a ransomware attack, according to a newly published (ISC)² ransomware study titled, “Ransomware in the C-Suite: What Cybersecurity Leaders Need to Know About What Executives Need to Hear.” Although confident, C-suite executives express a strong willingness to invest in technology and staff to improve defenses—signaling that now is an opportune time for cybersecurity leaders to proactively address their organizational readiness with the executive team. In response to several high-profile cyberattacks this year, (ISC)2 commissioned a survey of 750 C-level executives across the United States and the United Kingdom to... Read more →

(ISC)² Cybersecurity Scholarship Opportunities – Open Now!

(ISC)² is now accepting applications for its 2022 Women's Cybersecurity Scholarships, Undergraduate Cybersecurity Scholarships and Graduate Cybersecurity Scholarships. More than $100,000 in scholarships will be awarded in 2022. Applicants are evaluated based on academic excellence, passion for the industry and financial need. They are reviewed by volunteer (ISC)² members. If you are a member interested in participating and earning CPE credits, send an email to center@isc2.org. These scholarships are part of an effort to bridge the cybersecurity workforce gap—which stands at 2.72 million needed professionals—by providing future cybersecurity professionals across the globe with scholarships to prepare them for a rewarding... Read more →

(ISC)² Cybersecurity Entry-Level Certification Exam Topics Announced

To fill the cybersecurity workforce gap, we need to address the workforce shortage facing the industry, especially among entry- and junior-level positions. Creating an entry-level certification will help encourage new professionals to begin a cybersecurity career. After surveying cybersecurity experts on the most important domains, or subject matter areas, for new professionals, we have published the preliminary exam outline for the upcoming entry-level cybersecurity certification pilot program. This exam outline will allow the pilot program candidates to know which subjects they should be familiar with prior to taking the exam. Since this is an exam pilot program, topics are subject... Read more →

(ISC)2 Cybersecurity Workforce Study: Skills Gap Narrows But More Help Is Needed

The global cybersecurity skills gap narrowed over the past year, from 3.1 million to 2.7 million people, and job satisfaction got a substantial boost, according to the newly-published 2021 (ISC)2 Cybersecurity Workforce Study. The narrower skills gap reflects an increase in people joining the field, the study found. “For 2021, our study estimates there are 4.19 million cybersecurity professionals worldwide, which is an increase of more than 700,000 compared to last year.” However, the gap in Asia-Pacific (APAC) was reduced by 500,000 this year, overshadowing the increased deficits in all other regions where the gap has actually increased. Roughly one-third... Read more →

MEET THE RECIPIENTS OF THE 2021 (ISC)² GOVERNMENT PROFESSIONAL AWARD

The (ISC)² Government Professional Award recognizes government cybersecurity leaders whose commitment to excellence has helped to improve government information security and advance an in-demand workforce. The recognition is given to individuals whose initiatives have improved the areas of technology, process/policy or workforce and has led to significant developments in the security posture of a department, agency or entire government. We had a chance to learn more about the 2021 (ISC)² Government Professional Award honorees and their contributions to a safer and more secure cyber world. Asia-Pacific Region (ISC)² Government Professional Award Honoree Group Captain Amorn Chomchoey, CISSP is Acting Deputy... Read more →

#ISC2CONGRESS - Panel: DEI Initiatives Come Down To Choosing Talent

Picking up on the theme of diversity, equity and inclusion (DEI) that (ISC)² CEO Clar Rosso says is critical to solving the cybersecurity skills gap, a panel discussion on Monday addressed the challenges that get in the way of successful DEI implementations. Several themes emerged during the late-afternoon panel session, which was part of (ISC)2 Security Congress 2021, taking place virtually this week: Don’t expect change to occur immediately Diversity, equity and inclusion requires a step-by-step approach Keep talking about the issue so it stays at the forefront Measure success by looking at numbers within the organization The session, moderated... Read more →

(ISC)² Addresses the Cybersecurity Workforce Gap with New Entry-Level Cybersecurity Certification Pilot Program

In an effort to introduce more talent into the cybersecurity workforce, make cybersecurity a more accessible, inclusive and diverse profession, and close the cybersecurity skills gap, (ISC)² will pilot a new entry-level cybersecurity certification exam as part of its portfolio of industry qualifications. The entry-level certification will provide students, new entrants and career changers with clear and attainable professional development and career pathways from day one. In addition, it will give employers the confidence that new entrants into the sector have a solid grasp of the right technical, ethical and operational practices on which to build and learn. As a... Read more →

Younger Workers: Security Is a ‘Hindrance’

A new study from HP Wolf Security reveals that cybersecurity teams are meeting a lot of resistance as organizations adjust to a hybrid work model. The hybrid model blends work-from-home (WFH) with in-office policies, requiring cybersecurity teams to implement security measures for both. But their efforts aren’t always appreciated. Resistance to security measures is especially strong in the 18-24 age group, which appears to prioritize efficiency over security. Nearly half (48%) of respondents in the study, titled Rejections & Rebellions, said security policies are a hindrance and waste time. More than half (54%) are more worried about deadlines than potential... Read more →

Do You Hire Cyber Pros? Let’s Talk!

Are you responsible for hiring members of the cybersecurity team at your organization? Then we want to hear from you! (ISC)² is looking to meet with professionals who hire cybersecurity practitioners, specifically entry level staff. We are holding a two-day virtual meeting for this purpose which is scheduled for September 27-28, 2021. It will run from 8:30 a.m. to 4:30 p.m. (EST). If you’re interested and available for those two days, please send an email that includes your position and organization you work for to letstalk@isc2.org no later than September 15, 2021. The number of available seats is limited. Respondents... Read more →

Five Steps to Get a Cybersecurity Job

Finding your first job in any field is often a challenge. But your first job in cybersecurity? With no previous experience? That may seem impossible, but it’s not. According to the (ISC)² Cybersecurity Workforce Study 2020, the cybersecurity workforce needs to grow by 89% to effectively defend organizations’ critical assets; however, that doesn’t mean jobs are easy to find for all eager applicants. Organizations can often set their expectations unrealistically high, making it hard to fill these roles. A cybersecurity hire doesn’t necessarily need to have previous experience to be the right fit for the position. There are many skills... Read more →

2021 Q3 Updates from Our Chairperson and CEO: Membership Milestones and More

To provide transparency with the association, (ISC)² provides a quarterly update for members and candidates where we report on the latest developments at (ISC)². Following our board meetings, our CEO, Clar Rosso, and (ISC)² Board of Directors Chairperson, Zachary Tudor, CISSP, recap the latest association developments. The 2021 Q3 update included membership milestones (including 10,000 CCSP members worldwide!), association accreditations and new executive leadership announcements focused on member benefits and advocacy. Zach and Clar also discuss what (ISC)² is doing to continue to address global diversity, equity and inclusion in cybersecurity, as well as the workforce gap. You can view... Read more →

Let the Games Begin! TikTok Partners with NICE to Attract Young Cybersecurity Professionals

The cybersecurity industry is struggling with a 3.1 million worldwide skills gap, so the need to attract people to the profession is acute. But closing the gap is no easy task, and getting young people interested in the field is challenging. Innovative ideas to attract would-be cybersecurity professionals are always welcome. One such idea involves a collaboration by TikTok and the U.S. Commerce Department’s National Initiative for Cybersecurity Education (NICE). The initiative, the US Cyber Games, is designed to awaken interest among young people by having budding cybersecurity professionals face off in an esports-like competition. The US Cyber Games started... Read more →

CEO Clar Rosso: Championing (ISC)² Members and the Cybersecurity Profession

The duties of the CEO of a member association like (ISC)² are many, and part of the job is to be a strong voice for the membership in advocating for the cybersecurity profession. Clar Rosso took on that responsibility when she was appointed in October 2020. Ever since, she’s been representing the more than 160,000 current cybersecurity practitioners who have earned (ISC)² membership. In addition to meeting with members and presenting to global (ISC)² Chapters, speaking on panels and attending online conferences, Clar has also conducted dozens of press interviews to bring more visibility to the profession and has hosted... Read more →

Cybersecurity Leaders: Think in Business Terms

The vast majority of cybersecurity chiefs (93%) do not report to the CEO, according to a recently published report. As a result, a lack of communication between the C-suite and cybersecurity leaders keeps top executives largely in the dark about their organizations' cybersecurity risks and overall security posture. The report, published by LogRhythm and based on research by the Ponemon Institute, polled 1,426 security and technology leaders. “On average, respondents are three levels away from the CEO, which makes it very difficult to ensure that leadership has an accurate and complete understanding of security risks facing the organization,” the report... Read more →

Cybersecurity Professionals to Newcomers: Focus on Vendor-Neutral Certifications

Cybersecurity professionals are far more likely to hold vendor-specific certificates than certifications from a vendor-neutral association or standards-based organization, according to the (ISC)² Cybersecurity Career Pursuers Study. But when asked which qualifications they would recommend to cybersecurity newcomers, professionals tend to prioritize vendor-neutral credentials. This preference suggests that even though current professionals followed a more traditional, vendor-specific path when gaining experience in the field (55% of current professionals entered cybersecurity from IT backgrounds), they see greater value in pursuing broader professional qualifications for people starting their careers now. This is a perspective that may be informed by their own lessons... Read more →

Igniting Passion for Diversity, Equity and Inclusion (DEI): Cybersecurity Professionals Address Challenges and Offer Tangible Advice for Weaving Inclusion into Our Industry

Clar Rosso, (ISC)² CEO recently joined a roundtable of experts in an (ISC)² Think Tank webinar to highlight why it’s so important to the cybersecurity industry to focus on Diversity, Equity and Inclusion (DEI) as well as offer tangible and practical tips to address common challenges and tensions that often arise on the inclusion journey. The June 23 panel discussed why these initiatives often fail and how to push through the barriers that often keep them from achieving lasting transformation. Rosso was joined by Dr. Kevin Charest, Executive Vice President and CTO at HITRUST, and Samara Moore, AWS Security Assurance... Read more →

(ISC)² Offers Free Access to Ransomware Education | #RANSOMWAREWEEK

In conjunction with #RansomwareWeek, today (ISC)² announced that its popular Professional Development Institute (PDI) course titled “Ransomware: Identify, Protect, Detect, Recover,” is now free to the public through July 31, 2021. (ISC)² recognizes the intense demand for ransomware prevention and mitigation content and has opened registration to anyone who is interested in the topic. The two-hour ransomware course is Quality Matters (QM) approved and upon successful completion, learners earn a certification of completion and digital badge. Successful course completion will also unlock a 25% discount off all PDI courses through July 31, including the All-Access Pass and the Express Bundle.... Read more →

Hiring from Within and Retaining Cybersecurity Talent: Building Your Strategy

Faced with significant obstacles to build their cybersecurity teams, organizations increasingly are looking within to find transferrable talent for cybersecurity roles. It’s a practice strongly endorsed by (ISC)² in the recently published Cybersecurity Career Hiring Study and the Cybersecurity Workforce Study. The problem is that a substantial number of organizations aren’t up to the task of developing in-house talent for cybersecurity. Nearly half (45%) of companies in a recent study say they are not capable of doing it. And the problem doesn’t end there. The study, conducted by IT recruiting firm Hays US, also found that only 39% of respondents... Read more →