Three-quarters (87 per cent) of Chief Information Security Officers (CISOs) admit that they are facing a critical cyber skills gap crisis, according to new research from RiverSafe, a leading cybersecurity professional services provider.
The findings were revealed in Underfunded and Under Reported: Threats, Breaches, and Budgets report, a survey of 250 UK CISOs conducted by independent polling agency Censuswide, which highlighted concerns from security leaders around the large cyber gap within organisations.
The NCSC and Government are continuing the aim to bolster cyber skills training across the UK. The ‘CyberFirst’ programme, created by the NCSC, was launched to introduce young people, aged 11-17, to the fast-paced world of cyber security.
Furthermore, the government launched the ‘Cyber Explorers’ scheme last year, urging schools to enrol their students. This initiative is a free learning platform for 11-14 year olds, aiming to equip young people with essential cyber skills.
This supports the government’s £2.6 billion National Cyber Strategy, which focuses on enhancing cybersecurity skills at all levels. By participating in Cyber Explorers, schools contribute to a nationwide effort to strengthen online safety and prepare the next generation for a future in cybersecurity.
However, 83 per cent of CISOs currently believe their organisations have a gap in their cybersecurity skills, leaving them extremely vulnerable to ever-evolving cyber threats. This is particularly concerning when only 39 per cent of CISOs are prioritising the closure of this skills gap in 2024.
In fact, 60 percent of CISOs revealed that investing in hiring and training dedicated cybersecurity staff is draining too many resources, suggesting it is not currently a priority. This lack of investment of upskilling or hiring cyber-savvy employees will worsen the skills gap even further.
Furthermore, with two-thirds (63 per cent) of CISOs admitting that their organisation does not have enough visibility over devices, networks, and applications, the challenge of managing cyber threats effectively intensifies, especially with the skills gap.
Although, with 32 per cent of CISO’s stating their organisations have a Security Operation Centre (SOC) team, in comparison to 72 per centstating their organisation is utilising AI as part of its cybersecurity defence, highlights that there is a significant shift towards relying on AI for cybersecurity rather than human-operated skills.
This suggesting the lack of priority in upskilling and hiring trained staff, in order to close the cyber security skills gap.
Suid Adeyanju, CEO at RiverSafe, commented: “It is essential that CISOs make it a priority to close the cyber gap, in order to keep their organisation safe in an era of heightened threat. As cyber attacks become increasingly complex, especially with the rise of AI, proactive measures are essential to protect sensitive data and assets.
AI development is showing no signs of slowing down and organisations are increasingly adopting AI technologies as part of their business operations. While there are obvious benefits, it is also vital to recognise the security challenges that AI bring, especially when it comes to CISOs oversighting devices, and applications. Ultimately, cyber security and cyber crime are still conducted by people, so it is important for security teams not to lose sight of investing in people, even in an era of AI and automation.
