sb-nz logo
Story image

One-third of A/NZ business looking to hire security-specific skills - CompTIA

10 May 2019

Thirty-three percent of businesses in Australia and New Zealand (A/NZ) are looking to hire security-specific skills, according to a new report from CompTIA. 

In total, more than three-quarters of survey respondents indicated that their organisations were looking to improve security skills.

A mix of methods were reported including: offering security training for current employees (37%); hiring people with security-specific skills (33%); and offering security certification for current employees (28%). 

Furthermore, 20% are exploring the use of third parties and outsourcing security while 14% are looking to expand their use of third parties. 

According to AustCyber’s Australia’s Cyber Security Sector Competitiveness Plan 2018, a shortfall in Australia’s cybersecurity workforce may already be costing the nation more than $400 million in lost revenue and wages.

The local infosec sector is already short some 2,300 workers, with Australia expecting to need up to 17,600 additional cybersecurity professionals by 2026.

The volume and variety of cyber attacks are some of the primary factors contributing to the security skills shortage.

Today’s technology stack contains a diverse set of components, and any of these can be vulnerable. A breach in any one element could disrupt operations, leak data, or create access to other parts of the system. 

A range of skills is therefore needed to secure modern infrastructure, respond to incoming threats, and ensure proper operations.

CompTIA A/NZ Channel Community executive council member and Datto APAC sales director James Bergl says, “Given the current skills gap, the importance of offering security training and certification will be more important than ever in equipping the future workforce.

“It will also inspire loyalty by showing employees a willingness to invest in their career development, which ultimately benefits the business long-term.
 
“For channel businesses, the skills gap may lead to an increase in outsourced security as A/NZ businesses are left with few other options. Heavy competition from competing channel businesses will mean that a strong sense of loyalty will be required for the channel to retain its talent.” 

While skills growth is the most direct way to improve the effectiveness of a security team, there are other steps organisations can take to give a security team the best chance of success. 

Bergl says, “From a cultural perspective, understanding that IT is now a strategic activity drives a new mindset and behaviour.

“Likewise, new attitudes and practices must emerge as security becomes a separate operational function, and quickly integrating a new mentality throughout an organisation will help security efforts move forward. 

“The most critical aspect of modern security for an organisation to grasp is that the objective is no longer to build the ideal defence. Implementation and maintenance of a secure perimeter is still a necessary task, but it is no longer sufficient. 

“Cloud computing and mobile devices have introduced workflow and data storage techniques that require new models, and the incessant nature of attacks makes total prevention an unreasonable goal,” he says.

“As such, companies need more proactive methods to ensure a strong security posture including retaining and upskilling their security workforce.”

Story image
Microsoft is most imitated brand for phishing attacks in Q3
Popular phishing tactics using the Microsoft brand used email campaigns to steal credentials of Microsoft accounts, luring victims to click on malicious links which redirect them to a fraudulent Microsoft login page. More
Story image
Attack from DOS: In Zero We Trust
In combination with malware, DDoS attacks on banks have been used to cause distraction so the transfer of stolen funds goes unnoticed. More
Story image
Acronis expands global data centre network, including new facilities in NZ
The expansion ensures that the full range of Acronis Cyber Protection Solutions will be available to partners and organisations around the world.More
Story image
Cisco report: Remote working is here to stay, making cybersecurity a top priority
"With this new way of working here to stay and organisations looking to increase their investment in cybersecurity, there’s a unique opportunity to transform the way we approach security as an industry to better meet the needs of our customers and end-users.”More
Story image
UiPath and eSentire bring hyperautomation to Microsoft Security
UiPath and eSentire have announced a strategic partnership to deliver end-to-end security policy automation across multiple Microsoft Security services.More
Story image
Why IT and HR must work together to help businesses weather the storm
Employers are striving to balance team productivity, security and employee engagement. If remote work is the new norm, it’s impossible to ignore the challenging nature of the situation, writes Gigamon manager for A/NZ George Tsoukas.More