全球網(wǎng)絡(luò)安全技能差距研究報(bào)告-培訓(xùn)課件外文版2024.4

DIGITAL

&

TRENDSCybersecurityskillsgapsCHAPTER

01OverviewInformationsecurityproductsandservicesmarketrevenueworldwidefrom2011to2023(inbillionU.S.dollars)Totalrevenueglobalinformationsecuritymarket2011-2023200180160140188.1172.5150.41133.78120.93114.15120101.5410082.2375.68060402007267.261.8552011201220132014201520162017201820192020202120222023*4Description:Theinformationsecuritymarkethasincreasedconsiderablyoverthepastyears.In2023,therevenueofthesecuritytechnologyandservicesmarketworldwideisexpectedtopeakat188.1billionU.S.dollars.Informationsecurityreferstothepracticeofmanagingaccesstoinformation,whetherthatissecuringinformationfromunauthorizedaccessorverifyingtheidentityofthosewhoclaimtohaveauthoritytoaccessinformation.Asboththenumberofpossiblethreatsandawareness[...]

ReadmoreNote(s):Worldwide;2011to2023;*Forecast.ReadmoreSource(s):GartnerInformationsecurityspendingworldwidefrom2017to2024,bysegment(inmillionU.S.dollars)Totalspendingonglobalinformationsecuritymarket2017-2024,bysegmentApplicationsecurityIdentityaccessmanagementSecurityservicesCloudsecurityInfrastructureprotectionConsumersecuritysoftwareDataprivacyIntegratedriskmanagementDatasecurityNetworksecurityequipment250,000200,000150,000100,00050,000020172018201920202021202220232024*5Description:Globalspendingoninformationsecurityhasbeengrowingfrom2017to2023,increasingfromjustunder100billionU.S.dollarsin2017toalmost200billionU.S.dollarsin2023.Mostspendinghasconcentratedinsecurityservices,infrastructureprotection,andnetworksecurityequipment.Spendingonsecurityservicesisexpectedtoreachnearly90billionU.S.dollarsby2024.ReadmoreNote(s):Worldwide;2017to2023;*ForecastReadmoreSource(s):GartnerITsecurityspendinggrowthrateworldwidein2024,bysegmentGlobalITsecurityspendinggrowth2024,bysegmentAnnualgrowthrate0%5%10%15%20%25%24.7%24.6%30%CloudsecurityDataprivacyInfrastructureprotectionDatasecurity17.5%17.4%Applicationsecurity15.7%14.8%13.9%IdentityaccessmanagementNetworksecurityequipmentSecurityservices11.3%10.4%IntegratedriskmanagementConsumersecuritysoftwareOtherinformationsecuritysoftware6.4%26.4%6Description:Accordingtothesource,cloudsecuritywasexpectedtogrowbynearly25percentfrom2023to2024,makingitthefastestgrowingsegmentintheITsecuritymarket,largelyduetothegrowingdemandforcloudsolutionsasanincreasingnumberofcompaniesmigratetothecloud.Overall,thesourceexpectsthetotalITsecurityspendingtoincrease14.3percentin2024comparedto2023.ReadmoreNote(s):Worldwide;2023Source(s):GartnerShareofenterprisesthatexpecttheirITbudgettoincreaseinthenext12monthsasof2023,bysectorExpectationsforITbudgetincreasesworldwide2023,bysectorExpectITbudgetincrease20%0%10%30%40%50%60%Manufacturing/AutomotiveTechnology53%53%Power&UtilitiesBusiness/ProfessionalServicesEducation50%49%49%49%Transport/LogisticsCharity/Non-profitHealthcare48%47%Globalaverage45%FinancialServicesConstruction/EngineeringRetail42%40%36%Government34%7Description:Nearly53percentofrespondentsworkingintechnologyandmanufacturing/automotivecompaniesin2023,respectively,expectedtheirITbudgettoincreaseoverthenexttwelvemonths.Ontheotherhand,only34percentofrespondentsfromthegovernmentalsectorexpectedtheirITbudgettoincreaseintheupcomingtwelvemonths.ReadmoreNote(s):Worldwide;June22toSeptember18,

2023;2,104respondents;Digitalleadersacross86countriesSource(s):Cionet;NashSquaredCHAPTER

02Budgets&prioritiesAreasofpriorityspendingforimprovingcyberresiliencein2023,byprioritylevelMainspendingprioritiesforcyberresilience2023,byprioritylevelShareofrespondentsEssentialpriority

Highpriority0%

10%Overall20%30%27%40%37%50%46%60%70%80%90%Increasingthecyberresilienceofourcybersecurityteammembers83%Increasingthecyberresilienceofourgeneralworkforce(notincludingcybersecurityteammembers)49%75%30%Improvingprocessesatourorganizationforincidentresponseandpost-incidentremediation42%73%19%Deployingnewcybersecuritytechnologiestodetectand/ormitigatenewandemergingthreats/attacks53%71%9Description:Accordingtoasurveyofseniorsecurityprofessionals,increasingthecyberresilienceofcybersecurityteammembersconstitutedthetopspendingpriorityin2023,ashighlightedby83percentofrespondents,37percentofwhichconsidereditanessentialpriority.Anotheressentialspendingprioritywastheimprovementofprocesseswithinorganizationsforincidentresponseandpost-incidentremediation,asreportedby30percentofrespondents.

ReadmoreNote(s):Germany,UnitedKingdom,UnitedStates;November2022;570respondents;Seniorsecurityandriskprofessionalsworkinginorganizationswithatleast1,000employeesSource(s):ImmersiveLabs;OstermanResearchWhatareyourcybersecurityinvestmentprioritiesoverthenext12months?Cybersecurityinvestmentprioritiesforbusinessleadersworldwide202460%49%50%40%30%20%10%0%45%42%40%Modernizationoftechnology,including

Optimizationofcurrenttechnology

Ongoingimprovementsinriskposturecyberinfrastructure

andinvestments

basedoncyberroadmapOngoingsecuritytraining10Description:Whenaskedabouttheircybersecurityinvestmentprioritiesfor2024,nearlyhalfofbusinessrespondentsworldwidehighlightedmodernizationoftechnology,includingcyberinfrastructure.Inaddition,45percentofrespondentswereplanningtoprioritizeoptimizationofcurrenttechnologyandinvestments.Overall,40percentofrespondentsnamedongoingsecuritytrainingasatopinvestmentpriorityfor2024.ReadmoreNote(s):Worldwide;MaytoJuly2023;1,925respondents;businessexecutivesSource(s):PwC;PwCIndiaShareofcompaniesworldwidethatexpectanincreaseincybersecuritybudgetinthenext12monthsasofJune2023,byindustryGlobalboardmembersoncybersecuritybudgetincrease2023,byindustryShareofrespondents0%10%20%30%40%50%60%70%80%90%100%Business/professionalservicesMedia,leisureandentertainmentHealthcare89%89%85%85%Energy,oilandgas11Description:A2023surveyrevealedthat89percentofboardmembersofcompaniesactiveinbusinessandprofessionalservicesworldwideexpectanincreaseincybersecuritybudgetinthefollowing12months.Asimilarshareofboardmembersofmedia,leisure,andentertainmentcompaniesalsoreportedanticipatingabudgetincrease.Amongothersectorsexpectinganincreaseincybersecurityspendingwerehealthcareandenergy,with85percentofboardmembersconfirmingit.

ReadmoreNote(s):Worldwide;June9to19,2023;659respondents;boarddirectorsSource(s):Censuswide;ProofpointPercentageoforganizationsworldwidethathavemadeadequatecybersecurityinvestmentsaccordingtoboardmembersasofJune2023,bycountryShareofcompanieswithpropercybersecurityinvestments2023,bycountryShareofrespondents0%10%20%30%40%50%60%70%80%90%86%100%SingaporeBrazil83%81%80%79%AustraliaCanadaJapanSpain74%GlobalaverageFrance70%68%GermanyItaly63%57%57%MexicoUnitedStatesUnitedKingdom54%48%12Description:A2023surveyfoundthat86percentofboardmembersoforganizationsinSingaporebelievedthattheirorganizationhadmadeadequatecybersecurityinvestments.ThecompaniesinBrazilrankedsecond,with83percentoftheboardmembersagreeingwiththestatement.Overall,70percentoftheworldwiderespondentsfoundthattheirorganizationhadmadepropercybersecurityinvestments.ReadmoreNote(s):Worldwide;June9to19,2023;659respondents;boardmembersSource(s):Censuswide;MITCISR;ProofpointHowisyourcyberbudgetlikelytochangein2024?Cybersecuritybudgetchangesforcompaniesworldwide202435%31%30%25%20%15%10%5%24%15%10%9%3%2%2%2%1%0%0%Increaseby

Increaseby

Increaseby

Increaseby

Unchanged

Decreaseby

Decreaseby

Decreaseby

DecreasebyCannotDon'tknow15%ormore

11%-14%6%-10%5%orless5%orless6–10%11–14%15%ormore

determineat

anydetailonthistime((e.g.

thecyberduetobudgeteconomicandbusinessuncertainty)13Description:Over30percentofbusinessandtechnologyexecutivessurveyedforthisstudyexpecttheircompany'scyberbudgettoincreasebetweensixandtenpercentin2024.Overall,80percentofrespondentsworldwideanticipatetheirorganization'scybersecuritybudgettoincreasein2024.ReadmoreNote(s):Worldwide;MaytoJuly2023;3,876respondents;business,technologyandsecurityexecutives(CEOs,corporatedirectors,CFOs,CISOs,CIOsandC-Suiteofficers)Source(s):PwC;PwCIndiaCHAPTER

03CybersecurityworkforceSizeofcybersecurityworkforceworldwidein2023,bycountry(in1,000s)Numberofcybersecurityprofessionalsworldwide2023,bycountryNumberofprofessionalsinthousands02004006008001,0001,2001,4001,600UnitedStatesBrazil1,338.51749.48Mexico536.03Germany455.95480.66JapanUnitedKingdomSouthKoreaFrance367.3263.77217.19SpainSouthAfricaCanada182.14177.8157.32144.3138.86UnitedArabEmiratesAustralia15Description:Thenumberofprofessionalsworkinginthecybersecurityindustrywasestimatedtobeover1.3millionintheUnitedStatesin2023.Thenumberofcybersecurityprofessionalsgloballystoodat5.45million,upfrom4.6millionin2022.Cybersecurityreferstothepracticeofprotectingcomputerinformationsystems,hardware,networks,anddatafromcyberattacks.Asawarenessofcyberthreatsisrising,soisthesizeoftheglobalcybersecuritymarket.

ReadmoreNote(s):Worldwide;2023Source(s):ISC2Howstronglydoyouagreewiththefollowingstatementsrelatedtothestateofcybersecuritywork?Mainobservationsregardingthestateofcybersecurityworkworldwide2023Shareofrespondents0%

10%20%30%40%50%60%70%80%75%Thethreatlandscapeisthemostchallengingit'sbeeninthelastfiveyearsWearemorecarefullyevaluatingallthird-partysoftwareandhardwareonournetwork(includingopensource)70%I'mworriedaboutourcybersecurityteam'sabilitytokeepourorganizationsecureduringtimesofeconomicuncertainty52%52%52%MyorganizationhasthetoolsandpeopleweneedtoensurewerarepreparedtorespondtocyberincidentsoverthenexttwotothreeyearsTimesofeconomicuncertaintyhavenegativelyimpactedmybusinessasanindependentsecuritycontractorDuringtimesofeconomicuncertainty,Ifeelpressuretocometotheofficeratherthanworkfromhomeinordertobeseen43%16Description:In2023,whenaskedaboutthecurrentstateofcybersecuritywork,75percentofglobalrespondentsaffirmedthatthethreatlandscapewasthemostchallengingithadbeeninthelastfiveyears.Interestingly,overone-halfofrespondentswereworriedabouttheircybersecurityteam'sabilitytokeeptheirorganizationsecureduringtimesofeconomicuncertainty,whilethesamepercentageconsideredthattheirorganizationwassufficientlypreparedtorespondtocyberincidentsoverthe[...]

ReadmoreNote(s):Worldwide;ApriltoMay,2023;13,048-14,093;globalcybersecurityprofessionalsSource(s):ISC2Diversityamongcybersecurityteamsinselectedcountriesin2023,byraceandgenderDiversityamongcybersecurityteamsinselectedcountries2023,byraceandgenderShareofrespondentsWhitemenWhitewomen40%Non-whitemen60%Non-whitewomen80%0%20%100%2%120%60orolder50-5970%63%13%22%31%15%10%6%39-4954%7%8%30-3845%7%35%13%Under3037%6%40%18%17Description:Accordingtoa2023study,around70percentofcybersecurityprofessionalsaged60orolderintheUnitedStates,Canada,theUnitedKingdom,andIrelandwerewhitemen.Theproportionofnon-whitemeninthisagegroupreached15percent,whiletheshareofwhiteandnon-whitewomenaged60orolderwasaround13andtwopercent,respectively.Ontheotherhand,non-whitemenconstituted40percentofthecybersecurityworkforceunder30,andtheshareofnon-whitewomen[...]

ReadmoreNote(s):Canada,Ireland,UnitedKingdom,UnitedStates;ApriltoMay,2023;5,768respondents;cybersecurityprofessionalsSource(s):ISC2Howwouldyoudescribethecurrentstaffingofyourorganization'scybersecurityteam?Companies'cybersecuritystaffingworldwidein202350%46%45%40%35%30%25%20%15%10%5%36%13%2%Somewhatoverstaffed

Significantlyoverstaffed2%1%0%Significantlyunderstaffed

SomewhatundestaffedAppropriatelystaffedNotapplicable18Description:Overall,nearly60percentofrespondentsstatedthattheircompanywasunderstaffedintermsoftheircybersecurityworkforcein2023.Bycontrast,onlythreepercentofrespondentsstatedthattheircompanyhadasurplusofcybersecurityprofessionals.ReadmoreNote(s):Worldwide;Q22023;2,178respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitlesSource(s):ISACA;LookingGlassCybersecurityworkforcegapworldwidein2023,byregion(in1,000s)Cybersecurityworkforcegapworldwide2023,byregion3,0002,670.322,5002,0001,5001,000521.835000348.26LATAM347.76Europe111.8APACNorthAmericaMiddleEast&Africa19Description:TheAsia-Pacificregionwitnessedthelargestcybersecurityworkforcegapin2023,asover2.67millionITsecurityprofessionalswerestillneededinthemostpopulouscontinentatthattime.Globally,acybersecurityworkforcegapofaroundfourmillionneededtobefilled.ReadmoreNote(s):Worldwide,NorthAmerica,Europe,APAC,LAC;2023Source(s):ISC2Numberofcybersecurityprofessionalsneededworldwidein2023,bycountryCybersecuritygapassessmentworldwide2023,bycountryNumberofcybersecurityprofessionalsneeded600,000

800,000

1,000,000

1,200,0000200,000400,0001,400,0001,600,0001,800,0002,000,000ChinaIndia1,720,941789,793UnitedStatesBrazil482,985231,927MexicoJapanGermany116,331110,254104,660Spain74,498UnitedKingdomFrance73,43959,117SouthAfricaCanada57,26938,842UnitedArabEmirates31,92820Description:In2023,therewereover1.72millioncybersecurityprofessionalsneededinChinaandnearly800thousandinIndia.Overall,employersworldwidearestrugglingtofindqualifiedandskilledprofessionalstofillcybersecurityroles.

ReadmoreNote(s):Worldwide;2023Source(s):ISC2Howimportantareeachofthefollowingfactorsindeterminingifacybersecuritycandidateisqualified?Factorsdeterminingqualificationforacybersecurityjobworldwidein2023ShareofrespondentsNotveryimportant40%Veryimportant0%SomewhatimportantNotatallimportant60%Donotknow80%20%100%120%Priorhands-oncybersecurityexperienceCredentialsHands-ontrainingEmployerrecommendationUniversitydegreeAssociationmembership21Description:In2023,priorhands-oncybersecurityexperiencewasconsideredtobetheprimaryfactorindeterminingwhetheracandidatewasqualifiedforacybersecurityjob.Bycontrast,nearly40percentofrespondentsstatedthatanassociationmembershipwasnotanimportantfactorinthequalificationofacandidate.ReadmoreNote(s):Worldwide;Q22023;2,178respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitlesSource(s):ISACA;LookingGlassWhichofthefollowingbestdescribeswhyyouoriginallyenteredthecybersecurityprofession?Reasonswhyprofessionalsworldwideoriginallyenteredthecybersecuritysector2023Shareofrespondents0%5%10%15%20%25%30%CareeradvancementopportunitiesHighdemanforskillsIthoughtIwouldenjoytheworkIdidsomecybersecurityworkwhileinanotherrole(e.g.,generalIT)andenjoyeditPotentialforhighcompensatory/salary27%25%25%24%24%23%22%Itfitmyskillset/educationAbilitytosolveproblemsAbilitytoworkinacontinouslyevolvingfieldPersonal/emotionalsatisfaction19%17%Abilitytohelppeople/societyJobstability/lowunemploymentIdidsomecybersecurityonmyownandenjoyeditMycompanyreorganizedandIwaspushedintoacybersecurityrole14%14%14%13%22Description:In2023,themostimportantreasonwhyrespondentsworldwideenteredthecybersecurityprofessionwasbecauseofthecareeradvancementopportunities,aswellasbecauseofthehighdemandofskills.Additionally,24percentofrespondentsenteredthecybersecuritysectorbecauseofitspotentialregardinghighsalaries.ReadmoreNote(s):Worldwide;AprilandMay2023;14,865respondents;globalcybersecurityprofessionalsSource(s):ISC2CHAPTER

04SkillsgapsMostsoughtattributesincybersecurityprofessionalsworldwidein2023versus2022Topattributessoughtincybersecurityprofessionalsworldwide2023vs2022Shareofrespondents20230%20225%10%15%20%25%30%35%40%39%45%Curiosity/eagernesstolearnStrongcommunicationskills36%38%33%35%33%32%KnowledgeofbasiccybersecurityandcybersecurityconceptsCybersecuritycertifications29%25%25%KnowledgeofadvancedcybersecurityandcybersecurityconceptsStrongstrategicthinkingskills31%27%20%22%19%ExtensivecybersecurityworkexperienceCybersecurityqualifications(e.g.,trainings,etc.)otherthancertificationsoradegree17%13%Familiaritywithrelevantframeworks16%7%Strongcoaching/teamdevelopmentskills9%24Description:Themostsoughtskillamongcybersecurityprofessionalsin2023wasbeingcuriousandeagertolearn,ashighlightedbynearly40percentofrespondents.Atthesametime,38percentofrespondentsconsideredstrongcommunicationskillstobeasoughtattribute,afive-pointincreasecomparedto2022.Ontheotherhand,only20percentofrespondentsconsideredextensivecybersecurityworkexperiencetobeanimportantqualificationforcybersecurityprofessionalsin2023.

ReadmoreNote(s):Worldwide;AprilandMay2023;14,865respondents;individualsresponsibleforcybersecurityatworkplacesworldwideSource(s):ISC2Mostimportantsoftskillsneededbysecurityprofessionalsincompaniesworldwidein2023Softskillsneededbysecurityprofessionalsworldwide2023Shareofrespondents20%0%10%30%40%50%60%70%Communication(listening/speakingskills)58%Criticalthinking54%Problem-solving49%Teamwork(includescollaborationandcooperation)AttentiontodetailAdaptabilitytochangeDecisionmakingAttitude45%36%33%31%27%26%25%25%23%22%LeadershipqualitiesTimemanagementWorkethicWritingskillsConflictresolutionHonesty17%Empathy13%25Description:In2023,whenaskedwhichsoftskillstheircompanyrequiredthemost,58percentofrespondentsfirstlistedcommunicationsskills,suchaslisteningandspeaking.Only17percentofrespondentsselectedhonestyasoneofthetopsoftskillsthatsecurityprofessionalsshouldhavein2023.ReadmoreNote(s):Worldwide;Q22023;2,178respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitlesSource(s):ISACA;LookingGlassMostimportantsecurityskillsrequiredincompaniesworldwidein2023Mainsecurityskillsworldwide2023Shareofrespondents0%5%10%15%20%25%30%35%40%45%50%55%Identityandaccessmanagement(IAM)Cloudcomputing49%48%DataprotectionIncidentresponse44%44%DevSecOps36%Datacollectionandcorrelation(SIEM,SOAR)Threatdetectiontechnologies(IDS,IPS,UTM)Endpointsecurity(EDR,XDR)Threathunting33%31%30%29%28%27%VulnerabilityscanningPenetrationtestingVulnerabilitydiscoveryForensics24%20%NetworksegmentationVirtualization16%10%26Description:Whenaskedwhichsecurityskillsarethemostimportanttotheircybersecurityorganizations'needs,49percentofrespondentsplacedcloudcomputingintheirtopfiverequiredskills.Anotherskilllistedby33percentoftherespondentswasdatacollectionandcorrelation(SIEM,SOAR).ReadmoreNote(s):Worldwide;Q22023;2,178respondents;CybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitlesSource(s):ISACA;LookingGlassBiggestskillgapsamongcybersecurityprofessionalsin2023Skillgapsamongcybersecuritypersonnelworldwide2023Shareofrespondents0%10%20%30%40%50%60%Softskills(communication,flexibility,leadership)Cloudcomputing55%47%Securitycontrols(endpoint,network,application,implementation)Codingskills35%30%30%28%27%Softwaredevelopment-relatedtopics(languages,machinecode,testing,…Data-relatedtopics(characteristics,classification,collection,processing,structure)Networking-relatedtopics(architecture,addressing,networkingcomponents)Networkoperations(configuration,performancemonitoring)Systemhardening21%21%20%PatternanalysisComputingdevices(hardware,software,filesystems)Donotknow10%9%8%Other(pleasespecify)27Description:Softskillssuchascommunication,flexibilityandleadershipwereconsideredtobethebiggestskillgapamongcybersecurityprofessionalsin2023.Bycontrast,onlytenpercentofrespondentsstatedcomputingdevicesskillasdisparity.

ReadmoreNote(s):Worldwide;Q22023;2,178respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitlesSource(s):ISACA;LookingGlassLeadingskillsgapsamongcybersecurityteamsworldwidein2023Mainskillsgapsamongcybersecurityteamsworldwide2023Shareofrespondents0%5%10%15%20%25%30%29%35%35%40%CloudcomputingsecurityArtificialintelligence/machinelearningZeroTrustimplementation32%Penetrationtesting27%26%26%ApplicationsecurityDigitalforensicsandincidentresponseRiskassessment,analysisandmanagementSecurityengineering24%23%23%22%ThreatintelligenceanalysisMalwareresearch/analysis28Description:In2023,whenaskedaboutthemainskillsgapswithintheirorganization'scybersecurityteam,35percentofrespondentshighlightedcloudcomputingsecurity.Artificialintelligenceandmachinelearningrankedsecond,mentionedby32percentofrespondents.ZeroTrustimplementationfollowed,with29percentofrespondentsconsideringittobethebiggestskillsgapintheircybersecurityteam.ReadmoreNote(s):Worldwide;ApriltoMay,2023;11,473respondents;globalcybersecurityprofessionalsSource(s):ISC2Globalsecurityareaswhereprofessionaldevelopment/trainingismostneededin2023Globalsecurityareaswhereprofessionaltrainingisrequired2023Shareofrespondents0%

10%20%30%40%50%47%60%61%60%70%Securitycontrolsimplementation(endpoint,network,application)Softskills(communication,criticalthinking,flexibility,leadership)Networking-relatedtopics(architecture,addressing,networkingcomponents)Data-relatedtopics(characteristics,classification,collection,processing,structure)Systemhardening44%35%34%Networkoperations(configuration,performancemonitoring)Computingdevices(hardware,software,filesystems)Patternanalysis25%22%22%21%CodingskillsSoftwaredevelopment-relatedtopics(languages,machinecode,testing,…Other3%2%Noprofessionaltraining/developmentisneeded29Description:Forethissurveyconductedin2023,respondentswereaskedabouttherequiredprofessionaltrainingofcybersecuritystaffwithlessthanthreeyearsofworkexperienceintheirorganizations.Morethansixin10respondentsnamedsecuritycontrolsasoneoftheareaswheretrainingwasneededthemost.Softskillssuchcommunication,criticalthinkingandflexibilityfollowedclosely,with60percentofrespondentsstatingtheneedforsuchtraining.ReadmoreNote(s):Worldwide;Q22023;2,178respondents;cybersecurityprofessionalswhoholdtheISACACertifiedInformationSecurityManager(CISM)certificationorhaveregisteredinformationsecurityjobtitlesSource(s):ISACA;LookingGlassMainreasonsforskillsgapsamongcybersecurityteamsworldwidein2023Reasonsforskillsgapsamongcybersecurityteamsworldwide2023Shareofrespondents0%5%10%15%20%25%30%35%40%45%44%42%41%50%Myorganizationcan’tfindpeopletohirewiththeskillsweneedIngeneral,westruggletokeeppeoplewithin-demandskills(e.g.,duetolowwages,lackofpromotionopportunities,etc.)Myorganizationdoesn’thavethebudgettohireenoughpeopleLeadershipmisalignsstafresources(i.e.,toomuchstaffinsomeareasandnotenoughinothers)36%Myorganizationdoesn’tputenoughresourcesintotrainingnon-securityITstaffto33%32%31%becomesecuritystaffPeoplewiththeseskillsrecentlyquit,andwehaven'treplacedthemMyorganizationsdoesn'tsufficientlytrainstaffPeoplewiththeseskillsrecentlywerelaidoff,andwehavent'replacedthem25%30Description:In2023,whenaskedaboutthemainreasonsexplainingtheskillsgapswithintheirorganization'scybersecurityteam,44percentofrespondentsstatedthattheircompanycouldnotfindpeopletohirewiththeskillstheyneeded.Inaddition,42percentofrespondentsmentionedtheircompany'sstruggletokeeppeoplewithin-demandskillsduetolowwagesorlackofpromotionopportunities.Overall,41percentofrespondentsconsideredthelackofbudgetasthemaincauseforskills[...]

ReadmoreNote(s):Worldwide;ApriltoMay,2023;12,011respondents;globalcybersecurityprofessionalsSource(s):ISC2Whichofthefollowingskillsgapshaveyounoticedamongrecentuniversitygraduates?Skillsgapsamongrecentuniversitygraduatesworldwide2023Shareofrespondents0%

10%20%30%40%50%60%70%68%80%Softskills(e.g.,communication,flexibility,leadership)Securitycontrolsimplementation(e.g.,endpoint,network,application)Networkoperations(e.g.,configuration,performancemonitoring)Systemhardening54%39%36%Data-relatedt