Security Talent Shortage Hurts Business

Security Talent Shortage Hurts Business

Security Talent Shortage Hurts Business

Organizations with few full-time security experts pay three times more to recover from a cyber-attack than businesses with in-house experts.

Cyber- Security Talent Shortage

48% of the businesses surveyed admitted that there is a shortage of cyber-security talent, and 46% reported a growing demand for more of these specialists.

Protecting Business Assets

33% of the businesses said improving specialist security expertise is one of the top three drivers for an additional investment in IT security.

Cyber- Attacks Are Expensive

Large enterprises with few full-time security experts pay almost three times more to recover from a cyber-attack than those with in-house expertise: $1.2 million to $1.47 million versus $100,000-$500,000.

Costs of External Help

A significant portion of cyber-attack recovery costs is used for additional wages for hiring external expert help. The average cost: $126,000 for enterprises and $14,000 for small businesses.

More Full-Time Security Experts

69% of companies expect an increase in the number of full-time security expert, and 19% expect a significant increase.

Attacks That Spur Security Hiring

POS exploits: 46%, Zero day exploits: 41%, Hactivist activities: 38%, DDoS attacks: 37%, Third-party cloud breaches: 37%,

Security Education

Higher education is needed to fulfill the demand for more security experts, but there's also a call for changes in the security industry. One solution is to aid universities with relevant experience.

Sharing Intelligence

Another solution involves sharing intelligence with corporate customers in the form of threat data feeds, security training, and services to develop strategic security in the wake of advanced threats.

From Prevention to Detection and Response

Businesses tend to focus on prevention technologies and pay less attention to threat detection and response. But in three years, companies expect to invest 60% of their IT budgets on protection approaches beyond prevention.

Recommendations

The report recommends building new security solutions with intelligence in mind and ensuring that new findings about the evolving threat landscape are shared with everyone involved.