Business Wire

ISACA Survey: Cyber Security Skills Gap Leaves 1 in 4 Organizations Exposed for Six Months or Longer


Sophisticated cyber security defenses are increasingly in high demand as a cyber security attack is now viewed as an inevitability. However, a majority of surveyed organizational leaders fear they are ill-equipped to address these threats head-on.

This Smart News Release features multimedia. View the full release here:

ISACA's State of Cyber Security Study 2017 shows that the cyber security skills gap persists, with m ...

ISACA's State of Cyber Security Study 2017 shows that the cyber security skills gap persists, with many companies saying it can take six months or more to fill positions--and a significant percentage saying they can't fill them at all. (Photo: Business Wire)

According to a new cyber security workforce study by ISACA’s Cybersecurity Nexus (CSX), only 59 percent of surveyed organizations say they receive at least five applications for each cyber security opening, and only 13 percent receive 20 or more. In contrast, studies show most corporate job openings result in 60 to 250 applicants. Compounding the problem, ISACA’s State of Cyber Security 2017 found that 37 percent of respondents say fewer than 1 in 4 candidates have the qualifications employers need to keep companies secure.

“Though the field of cyber security is still relatively young, demand continues to skyrocket and will only continue to grow in the coming years,” said Christos Dimitriadis, ISACA board chair and group director of Information Security for INTRALOT. “As enterprises invest more resources to protect data, the challenge they face is finding top-flight security practitioners who have the skills needed to do the job. When positions go unfilled, organizations have a higher exposure to potential cyberattacks. It’s a race against the clock.”

More than 1 in 4 companies report that the time to fill priority cyber security and information security positions can be six months or longer. In Europe, almost one-third of cyber security job openings remain unfilled.

Cyber Security Qualifications: A Moving Target

Most job applicants do not have the hands-on experience or the certifications needed to combat today’s corporate hackers, according to the report by the global technology association.

“The survey underscores a fundamental disconnect between employer expectations and what candidates can actually bring to the table,” said Matt Loeb, ISACA CEO. “Employers are looking for candidates to make up for lost time but that doesn’t necessarily mean a significant academic investment. Many organizations place more weight in real-world experience and performance-based certifications and training that require far less time than a full degree program.”

ISACA’s report highlighted where hiring managers’ expectations are shifting most as they consider candidates for open cyber security positions:

  • 55% of respondents report that practical, hands-on experience is the most important cyber security qualification
  • 25% say today’s cyber security candidates are lacking in technical skills
  • 45% don’t believe most applicants understand the business of cyber security
  • 69% indicate that their organizations typically require a security certification for open positions

Closing the Gap

ISACA offers five recommendations to help find and retain qualified cyber security talent:

1. Invest in performance-based mechanisms for hiring and retention.

2. Create a culture of talent maximization to retain the staff you have. Even when budgets are tight, there are things that can be done that don’t impact the bottom line: alternative work arrangements, investment in personnel growth and technical competency, and job rotation to help round out skills.

3. Groom employees with tangential skills—such as application specialists and network specialists—to move into cyber security positions. They are likely to be highly incented to do so and it can help fill the gap in the long term.

4. Engage with and cultivate students and career changers (e.g., an outreach program to a university or an internship program).

5. Automate basic security operational tasks to decrease the overall burden on staff.

Download a free copy of the workforce report at


Contact information

Jay Schwab, +1-847-660-5693
Kristen Kessinger, +1-847-660-5512

Om Business Wire

Business Wire
Business Wire
24 Martin Lane
EC4R 0DR London

+44 20 7626 1982

(c) 2018 Business Wire, Inc., All rights reserved.

Business Wire, a Berkshire Hathaway company, is the global leader in multiplatform press release distribution.

Følg saker fra Business Wire

Registrer deg med din epostadresse under for å få de nyeste sakene fra Business Wire på epost fortløpende. Du kan melde deg av når som helst.

Siste saker fra Business Wire

Global Powerhouses Coming to CES Asia 2018: Alibaba A.I. Labs, BYTON, FAW Hongqi, Guangzhou Automobile Group, iQIYI, KIA, Leapmotor, LG Electronics, Mitsubishi Electric Automotive, Singulato, Skyworth and TCL18.3.2018 20:00Pressemelding

The Consumer Technology Association (CTA) today announced the newest leading global brands added to its growing exhibitor list for CES Asia 2018. Technology powerhouses including Alibaba A.I. Labs, BYTON, FAW Hongqi, Guangzhou Automobile Group, iQIYI, KIA, Leapmotor, LG Electronics, Mitsubishi Electric Automotive, Singulato, Skyworth and TCL are set to showcase their latest tech tailored toward the Asian market at CES Asia in June. “The tech showcased at CES Asia 2018 will be ground-breaking,” said John T. Kelley, senior director, international programs and show director, CES Asia. “From artificial intelligence, vehicle technology, content development and distribution to smart cities and more, the show will be packed with innovation from global brands and cutting-edge startups alike. These first time exhibitors demonstrate the incredible caliber and scope of CES Asia and attendees will be blown away this year.” BYTON, who recently unveiled its first concept all-electric vehicle at CES

Summer Business with New Shop Feature and High-Performance Tyre Models16.3.2018 14:11Pressemelding

Each year, summer trade means great challenges for car garages and tyre dealers. As a result and at just the right time,, the online trade customer shop by Europe’s leading online tyre dealer Delticom, is introducing a new feature intended to make the daily work of the shop’s customers easier: An advice mode is available from now on at When changing from the purchasing to the sales view, the individual end customer prices are displayed instead of the actual purchase prices. In order to use this feature, users of simply have to insert their individual markups for the different item groups. From the markup and the purchase price, the online shop automatically calculates the personal end customer price. The usual purchasing view is also still available. This press release features multimedia. View the full release here: An advice mode immediately helps trade customers use the full pot

Available Now: The Smartphone Made for the Way We Communicate Today, the Galaxy S9 and S9+16.3.2018 12:00Pressemelding

Samsung Electronics America, Inc. announced that the new, award-winning Galaxy S9 and Galaxy S9+, which have been recognized by smartphone reviewers worldwide for their best-in-class display, design and camera, are now available for purchase at U.S. wireless network providers and retail stores. The phones come in three colors: Midnight Black, Coral Blue, and the new Lilac Purple. The Galaxy S9 has a suggested retail price of $719.99, while the Galaxy S9+ is available for $839.99. Both unlocked and carrier versions of the Galaxy S9 and Galaxy S9+ are also available for purchase on This press release features multimedia. View the full release here: Designed for the way we communicate today, Samsung's new Galaxy S9 and Galaxy S9+ are available in the U.S. at wireless network providers, retailers and on (Photo: Business Wire) “The Galaxy S9 and S9+ are designed for the visual and social generation—the consum

CONQUEST Group Announced the Expansion of its Asset Management Business with the Appointment of Philippe Taillardat to the Role of Director16.3.2018 09:00Pressemelding

Philippe Taillardat brings to CONQUEST over 25 years of Asset Management and Investment Banking experience, primarily in principal investing, financial advisory, equity and debt financing across global infrastructure and sustainable energy sectors. This press release features multimedia. View the full release here: Philippe Taillardat (Photo: CONQUEST Group) Philippe was most recently Co-Head of Infrastructure Investments Europe at First State Investments, which he helped transform into one of the leading billion+ European infrastructure fund manager in core / core+ strategies. Earlier in his career, Philippe held various senior banker and investment roles at Amundi, Credit Agricole CIB, Credit Suisse, AXA and BNP Paribas. Frédéric Palanque, Managing Director of CONQUEST Group, said, "We are delighted to welcome such a recognized professional. CONQUEST is trusted for providing value-added advice in complex and highly confidential

AccelStor All-Flash Solutions Unlock Data Possibilities for AI and Cloud16.3.2018 09:00Pressemelding

AccelStor, an innovative all-flash array (AFA) provider for the big data era, is excited to announce its participation in the upcoming Cloud Expo Europe, taking place from March 21 to 22 at Booth C1850 in the ExCel London exhibition centre. Besides presenting latest all-flash storage solutions breaking through performance and availability barriers for artificial intelligence (AI), virtualization and private cloud, AccelStor will present a live demonstration of its new generation NeoSapphire high availability models, one of the highlights not to be missed this year. This press release features multimedia. View the full release here: AccelStor's new generation NeoSapphire High Availability all-flash array AccelStor NeoSapphire all-flash arrays are highly integrated with virtualization and private cloud platforms, supporting VMware vSphere and OpenStack Cinder. NeoSapphire’s “high availability” series features symmetric active-activ

Westinghouse Completes First Major Decommissioning Work at a Nordic Commercial Nuclear Reactor16.3.2018 08:45Pressemelding

Westinghouse Electric Company announced today that it has completed a major decommissioning project at the former Barsebäck nuclear power plant in Skåne, Sweden. Barsebäck Unit 2 ceased operation in 2005 and decommissioning work began in August 2016. Westinghouse’s scope of work included the underwater segmentation and packaging of the reactor vessel internals, as well as the upfront engineering studies and equipment manufacturing and qualification. “Westinghouse is proud to deliver this major decommissioning project on time and on budget,” said Yves Brachet, Westinghouse senior vice president, Global Decommissioning, Decontamination, Remediation and Waste Management. “Our global expertise in this area will help our customers in the Nordic region to safely manage a variety of end-of-life opportunities for commercial nuclear power plants.” Leadership at Barsebäck Kraft AB (BKAB) is equally satisfied with this successful initial step of the first dismantling of a commercial nuclear power