Our friends at ISACA® report the results of the annual ISACA global 'State of Cybersecurity' Survey, conducted in the fourth quarter of 2019. This Part 1 survey report highlights current trends in cybersecurity workforce development, staffing, budgeting and gender diversity. The report echoes - and reaffirms - key findings of prior years: Enterprises are still short-staffed in cybersecurity, struggle to find sufficient talent for open positions and expect their cybersecurity budgets to grow. Efforts to increase the number of women in cybersecurity roles progressed slightly, and more enterprises established gender diversity programs.

Challenges Persist in Cybersecurity Resourcing

ddls blog isaca cyberthreats resources

The demand for cybersecurity talent2 has steadily risen, which is good news for new and aspiring practitioners. Although this year’s survey results on staffing are largely consistent with prior-year data, current data reveal a sizeable shift away from assessments of significantly understaffed to appropriately staffed (figure 3). Last year, 21 percent of respondents reported that their cybersecurity team was significantly understaffed; only 15 percent report the same perception this year. The percentage of respondents who believe that their cybersecurity team is appropriately staffed increased from 25 percent last year to 31 percent this year. The industry remains a seller’s market and, consequently, enterprises face resourcing and retention issues. Analysis of this year’s responses confirms that understaffed organizations are significantly more likely to have retention issues. Additionally, understaffed teams are significantly more likely to have experienced more cyberattacks during the last year - a point supported by other cyberworkforce data.

Qualifications and Confidence Levels

ddls blog isaca cyberthreats qualifications

Survey results indicate that hiring manager confidence is low when it comes to applicants. Figure 10 indicates that 70 percent of respondents generally do not believe their applicants are well qualified. Although this datapoint alone does not characterize deficiencies among applicants, it does help to explain delays in filling positions - not surprisingly, 73 percent of respondents who reported less than 25 percent of their applicants are well qualified have unfilled positions longer than three months.

You can download the full report here.

View all of our ISACA courses here.

Feature Articles

What to look for in a cloud security system and in training
By Leif Pedersen | 19 February 2024
Unleashing the Power of Data Analytics: A Call for Governments and Public Sector Agencies
By Chloe Villanueva | 20 November 2023
Case Study
Case Study: Spark NZ getting ahead with ITIL Certification
By Leigh Richardson | 30 June 2023
Drive Innovation with IT Service Management Training
11 December 2023