The cybersecurity field is lacking hundreds of thousands of workers - and this new research shows us why

Small Business office
(Image credit: Getty Images)

New research from ISACA shows that businesses are facing increased risk from the cyber skills gap.

The report comes in light of the fact that Europe is currently facing a shortage of between 260,000 to 500,000 skilled cybersecurity workers, and with cyberattacks fast becoming a daily occurrence for businesses, the report shows that over three-quarters (78%) of security leaders believe most organizations are under-reporting the attacks they experience.

 With over half (52%) of organizations experiencing more cyberattacks than last year, it has never been more important to have a robust cyber defense. However, 62% of leaders in the cybersecurity field say that their teams are understaffed, and only an astounding 41% have a high level of confidence in their teams ability to handle cyber threats.

Retention, training, and upskilling

These statistics signal just how dire the cyber skill landscape is - but things are starting to improve. Compared to 2022, staffing within the cybersecurity field has marginally increased, up from 34% of respondents describing their team as ‘appropriately staffed’, to 36% in 2023.

Around a third of respondents (34%) said most of the vacant positions within their cybersecurity team were at the lowest level, individual contributors/technical cybersecurity. Contrast this with the type of positions that are unfilled - 50% non-entry-level compared to 21% entry-level - and it's understandable how this crisis has come to be.

Entering the field of cybersecurity requires not only experience, but also qualifications, which companies are hesitant to invest in due to the current crisis in retention. However, if you are looking to work in this field, there are some key skills that are sure to get you hired, with identity and access management (IAM); cloud computing; data protection; incident response; and DevSecOps all named as vital.

There are also key soft skills that are highly desirable within the industry as a whole, such as; communication; critical thinking; problem-solving; teamwork; and attention to detail. 

“If businesses are to maintain their cyber resilience in an ever-evolving threat climate, we must encourage and nurture talent in the cybersecurity industry.” said Chris Cooper, member of ISACA’s Emerging Trends Working Group, “Employers are looking for people who already have hands-on experience, but we will only enable people to build that experience by creating more entry-level roles and investing in the right training and development for everyone in the industry, from the ground up.” 

More from TechRadar Pro

Benedict Collins
Staff Writer (Security)

Benedict has been writing about security issues for over 7 years, first focusing on geopolitics and international relations while at the University of Buckingham. During this time he studied BA Politics with Journalism, for which he received a second-class honours (upper division), then continuing his studies at a postgraduate level, achieving a distinction in MA Security, Intelligence and Diplomacy. Upon joining TechRadar Pro as a Staff Writer, Benedict transitioned his focus towards cybersecurity, exploring state-sponsored threat actors, malware, social engineering, and national security. Benedict is also an expert on B2B security products, including firewalls, antivirus, endpoint security, and password management.

Read more
An abstract image of digital security.
Tackling the UK's cybersecurity skills shortage
Cyber-security
Security leaders don't want to be held personally liable for attacks
Avast cybersecurity
UK cybersecurity sector could be worth £13bn, research shows
A person working from home using two laptops.
Bad news job hunters, the IT job market is still struggling
Classroom
Many schools still don’t have basic cybersecurity measures, research reveals
woman sit on couch near laptop take break reduce stress do yoga meditation exercise to calm down self control get rid of negative emotions, bad e-mail, difficult task, problems at work concept
IT industry workers hit badly by burnout, stress - but there's still potential for success
Latest in Pro
US flags
US government IT contracts set to be centralized in new Trump order
Google Gemini AI
Gmail is adding a new Gemini AI tool to help smarten up your work emails
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Coinbase targeted after recent Github attacks
IBM office logo
IBM to provide platform for flagship cyber skills programme for girls
Teams
Microsoft Teams is finally adding a tiny but crucial feature I honestly can't believe it never had
Oracle
Oracle denies data breach after hacker claims to hold six million records
Latest in News
A phone showing a ChatGPT app error message
ChatGPT is down for many – here's what's going on
AirPods Max with USB-C in every color
Apple's AirPods Max with USB-C will get lossless audio in April, but you'll need to go wired
A woman sitting in a chair looking at a Windows 11 laptop
It looks like Microsoft might have thought better about banishing Copilot AI shortcut from Windows 11
US flags
US government IT contracts set to be centralized in new Trump order
Tesla Roadster 2
Tesla is still taking deposits on its long overdue Roadster, despite promising it would arrive in 2020
Samsung HW-Q990D soundbar with Halloween theme over the top
Samsung promises to repair soundbars bricked by its disastrous software update for free – but it'll probably involve shipping