网络安全人才：网络防护的巨大缺口（英文版）_28页-2mb

CYBERSECURITY TALENT: Bridging the Gap

Core Content Overview

The document outlines eight recommendations for organizations to address the cybersecurity talent gap, emphasizing the need for both acquisition and retention strategies. It highlights the growing demand for cybersecurity skills and the lack of supply, with the gap expected to persist for the next five years. The recommendations focus on attracting and retaining top cybersecurity professionals by understanding their preferences and leveraging innovative methods.

Main Recommendations

Priority One: Step up the acquisition of cybersecurity talent

1. Think outside the box: Organizations should look beyond traditional recruitment methods and consider unconventional sources such as military and government alumni, neurodiverse candidates, and bug bounty programs.
2. Hunt where cybersecurity talent is active: Engage with platforms and events where cybersecurity professionals are present, such as online competitions (Kaggle, TopCoder), hackathons, and gamified recruitment.
3. Create a compelling story: Highlight the leadership and team environment to attract candidates. This includes hiring senior executives who can bring in new talent and showcasing a digitally talented peer group.
4. Look inward: Identify existing employees who may have the potential to be retrained or repurposed for cybersecurity roles, especially those with relevant skills like coding or IT expertise.

Priority Two: Improve the retention of cybersecurity talent

1. Incentivize skill development: Encourage employees to upgrade their cybersecurity knowledge through training and learning opportunities.
2. Promote gender inclusion: Address the underrepresentation of women in cybersecurity by supporting early education in STEM fields and offering mentorship and targeted internship programs.
3. Ensure clear career development paths: Provide visibility into career progression, especially for Gen Y and Gen Z professionals, who value structured career paths more than other employees.
4. Automate routine tasks: Free up cybersecurity professionals' time by automating mundane activities, allowing them to focus on strategic, value-adding work.

Key Findings and Insights

• Cybersecurity talent is in high demand and low supply: Over half of companies report a widening digital talent gap, with cybersecurity skills ranking highest in both demand and supply gap.

• Top preferences of cybersecurity professionals:

  • Flexible work-life balance (83%)
  • Open and collaborative work space (82%)
  • Flat hierarchy and accessible management (82%)
  • Opportunities to engage with the local community (82%)
  • Clear career development path (81%)

• Top reasons for dissatisfaction or leaving:

  • Career progression
  • Infrastructure
  • Job security
  • Work-life balance
  • Communication

• Innovative recruitment methods:

  • Bug bounty programs
  • Gamification (e.g., Cyber Security Challenge UK, CTF competitions)
  • Hackathons and online competitions
  • Social media engagement and storytelling

• Cybersecurity talent profile:

  • 31% of surveyed employees are considered cybersecurity talent.
  • They are more likely to join firms with innovative hiring practices, a digitally talented peer group, and clear career paths.

• Talent pool by geography and industry:

  • India and the US have the largest cybersecurity talent pools.
  • Insurance and Banking industries have the highest proportion of cybersecurity talent.

• Gen Y and Gen Z preferences:

  • 82% of Gen Y and Gen Z cybersecurity professionals prefer innovative hiring approaches.
  • 78% of all cybersecurity talent prefer a digitally talented peer group.
  • 84% of Gen Y and Gen Z cybersecurity professionals want a clear career path.

• Flexible work arrangements:

  • 80% of cybersecurity employees prefer a flexible work-life balance.
  • This is a key factor in retention and job satisfaction.

• Internal talent development:

  • Companies should re-purpose existing IT and engineering professionals for cybersecurity roles.
  • Training programs, such as AT&T’s retraining initiative, are essential for building in-house expertise.

Conclusion

Organizations that successfully attract and retain cybersecurity talent are better positioned to manage digital risks and leverage digital opportunities. The talent gap is not only a challenge but also an opportunity to innovate in recruitment and retention strategies. By focusing on flexible work environments, clear career paths, and continuous learning, companies can improve their cybersecurity capabilities and remain competitive in the digital era.