sb-au logo
Story image

One-third of A/NZ business looking to hire security-specific skills - CompTIA

10 May 2019

Thirty-three percent of businesses in Australia and New Zealand (A/NZ) are looking to hire security-specific skills, according to a new report from CompTIA. 

In total, more than three-quarters of survey respondents indicated that their organisations were looking to improve security skills.

A mix of methods were reported including: offering security training for current employees (37%); hiring people with security-specific skills (33%); and offering security certification for current employees (28%). 

Furthermore, 20% are exploring the use of third parties and outsourcing security while 14% are looking to expand their use of third parties. 

According to AustCyber’s Australia’s Cyber Security Sector Competitiveness Plan 2018, a shortfall in Australia’s cybersecurity workforce may already be costing the nation more than $400 million in lost revenue and wages.

The local infosec sector is already short some 2,300 workers, with Australia expecting to need up to 17,600 additional cybersecurity professionals by 2026.

The volume and variety of cyber attacks are some of the primary factors contributing to the security skills shortage.

Today’s technology stack contains a diverse set of components, and any of these can be vulnerable. A breach in any one element could disrupt operations, leak data, or create access to other parts of the system. 

A range of skills is therefore needed to secure modern infrastructure, respond to incoming threats, and ensure proper operations.

CompTIA A/NZ Channel Community executive council member and Datto APAC sales director James Bergl says, “Given the current skills gap, the importance of offering security training and certification will be more important than ever in equipping the future workforce.

“It will also inspire loyalty by showing employees a willingness to invest in their career development, which ultimately benefits the business long-term.
 
“For channel businesses, the skills gap may lead to an increase in outsourced security as A/NZ businesses are left with few other options. Heavy competition from competing channel businesses will mean that a strong sense of loyalty will be required for the channel to retain its talent.” 

While skills growth is the most direct way to improve the effectiveness of a security team, there are other steps organisations can take to give a security team the best chance of success. 

Bergl says, “From a cultural perspective, understanding that IT is now a strategic activity drives a new mindset and behaviour.

“Likewise, new attitudes and practices must emerge as security becomes a separate operational function, and quickly integrating a new mentality throughout an organisation will help security efforts move forward. 

“The most critical aspect of modern security for an organisation to grasp is that the objective is no longer to build the ideal defence. Implementation and maintenance of a secure perimeter is still a necessary task, but it is no longer sufficient. 

“Cloud computing and mobile devices have introduced workflow and data storage techniques that require new models, and the incessant nature of attacks makes total prevention an unreasonable goal,” he says.

“As such, companies need more proactive methods to ensure a strong security posture including retaining and upskilling their security workforce.”

Story image
WatchGuard rolls out updates to bring greater security to MSPs
"WatchGuard Cloud’s continued evolution is lowering the barrier to entry for MSPs to add security to their portfolios and solidifying it as the management platform of choice for the security channel.”More
Story image
Microsoft, Facebook and PayPal most impersonated brands during phishing attacks
Microsoft has maintained its position as the brand most often found in phishing emails, followed by Facebook and PayPal.More
Story image
ExtraHop reveals methods used by attackers in SUNBURST breach
The network detection and response company says between late March and early October 2020, detections of probable malicious activity increased by approximately 150%, including detections of lateral movement, privilege escalation and command and control beaconing.More
Story image
Quantum extends Veeam partnership in a bid to protect against ransomware
“Quantum continues to expand its partnership with us and we are pleased to add ActiveScale object storage to a select group of S3 targets that can provide robust ransomware protection for our joint customers."More
Story image
Trend Micro expands XDR capabilities through new platform
Trend Micro has rolled out new extended detection and response (XDR) capabilities through a new platform called Vision One.More
Story image
Kaseya acquires RocketCyber to bring SOC solutions to more businesses
"With this acquisition, we've doubled down on our security investments to provide our customers with access to experts who can continuously monitoring their IT environments without the cost and complexity of disparate tools.”More