Connect with us

Hi, what are you looking for?

HEADLINES

The financial impact of the shortage in IT security experts on businesses

Large businesses that struggle to attract sufficiently skilled IT security experts end up paying up to three times more to recover from a cybersecurity incident. This is one of the key findings of a recent report prepared by Kaspersky Lab, based on the experience of company experts and data from the 2016 Corporate IT Security Risks survey. 

Besides the measurable budget impact, a significant share of businesses is observing a growth in wages, a general shortage in expert availability, and the need for more specialists in the field.

Technical expertise and beyond

Citing complexity of IT infrastructure, compliance requirements and the overall desire to protect business assets, companies are highly motivated to grow their security intelligence. In fact, for a third of businesses, the improvement of specialist security expertise is one of the top three drivers for an additional investment in IT Security.

Advertisement. Scroll to continue reading.

The growing demand is not easy to fulfill due to a lack of available specialists and increasingly complex requirements. Kaspersky Lab employs hundreds of security professionals, and the company’s own recruitment managers report that on average, only one applicant out of forty, meets the strict criteria for an expert position.

But the challenge is not limited to technical know-how. The report quotes Kaspersky Lab’s security experts, who indicate that the need for security managers is even more substantial.

On top of deep technical knowledge, managers’ duties include communication with top management and overseeing the overall strategy – qualities that are especially important, and in fact, more appropriate, for large companies.

The report adds a final touch to the bigger picture of talent shortage with education challenges. Success in IT security requires a certain degree of passion for this particular IT field, willingness to constantly self-educate, and the ability to adapt to an ever-changing threat landscape.

Higher education institutions recognize the need revise their programs, and at the same time acknowledge the challenge of embedding security-oriented thinking into a wide variety of IT courses.

Advertisement. Scroll to continue reading.

A call to action for the security industry

Overall, 68.5% of companies expect an increase in the number of full-time security experts, with 18.9% expecting a significant increase in headcount. Higher education is an important part of fulfilling such a demand, but this is also a call for a change within the security industry itself.

One of the solutions is to aid universities with relevant experience. Another, and very important in the long term, is to adapt R&D efforts towards the effective sharing of intelligence with corporate customers in the form of threat data feeds, security training and services.

A proper combination of security solutions and intelligence is what helps corporate security teams to spend less time on regular cybersecurity incidents and focus on strategic security development and advanced threats. The report provides an example of such vision from Kaspersky Lab’s business experience.

“In this evolving industry the relationship with our customers already goes beyond the shipment of a technology or a product. We need to provide them with the skills and training required to identify on-going attacks. Detailed knowledge about attacks on other businesses, in the form of intelligence reports, is also necessary, along with actionable, machine-readable data about on-going threats. Solving the different challenges of threat prevention, the detection of targeted attacks, incident response and prediction requires a lot of flexibility,” comments Veniamin Levtsov, Vice President, Enterprise Business at Kaspersky Lab.

Advertisement. Scroll to continue reading.

“As a security vendor we are dedicated to increasing the quality and size of the expert security workforce around the world. Among many projects to support this initiative we are developing IT Security Fundamentals – an educational course that will hopefully help more IT professionals to start their journey in the field of security expertise,” adds Levtsov.

The full report titled “Lack of security talent: an unexpected threat to corporate cybersafety” is available at Kaspersky Lab’s website here.

You May Also Like

HEADLINES

"Given the Philippines' high exposure to cyber threats, it's important for both individuals and businesses to stay vigilant," said Adrian Hia, Managing Director for...

White Papers

When compared to 2023, Sophos saw a 51% increase in abusing “Living off the Land” binaries or LOLbins; since 2021, it’s increased by 83%.

HEADLINES

Someone illegally acquires or uses personal information such as bank account or credit card numbers of another person to obtain money, goods or services....

HEADLINES

To stay ahead of these challenges, organizations need to invest in AI-driven defenses, transition to quantum-safe encryption, and adopt a Zero Trust approach to...

HEADLINES

There was a 121% Year-on-Year (YoY) increase in identity fraud in 2024 across the region, with significant surges recorded in Singapore (207%), Thailand (206%)...

HEADLINES

As part of RCBC’s 2024 Cybersecurity literacy program, the webinar aims to help Filipinos level up their online banking safety by providing them with...

White Papers

The survey found that CXO’s feel less prepared than their global peers. Less than half or 48% in APAC said they felt completely prepared...

HEADLINES

On average, a single organization in the Philippines experiences 4,003 attacks per week, significantly higher than the APAC average of 2,870 attacks per week.

Advertisement