Cyber Security is a ‘people problem’ says IISP Survey

Cyber Security is a ‘people problem’ says IISP Survey

No Comments on Cyber Security is a ‘people problem’ says IISP Survey

…but more companies say they are better prepared to deal with a breach or incident

20 April 2017: Over 80% of security professionals identify ‘people’ as the industry’s biggest challenge compared to technology and processes, according to the results of the second annual survey from The Institute of Information Security Professionals (IISP). The survey also indicates that while 60% of respondents still feel that investment is not keeping pace with threat levels, there was a modest 5% increase in businesses that feel better placed to deal with a breach or incident if it happens. In real terms, spending does appear to be on the rise with 70% of companies seeing an increase in budget, up from 67% and only 7% reporting a reduction, which is down from 12% last year.

Piers Wilson

Piers Wilson

While people have long been seen as the weakest link in IT security through lack of risk awareness and good security practice, the people problem also includes the skills shortage at a technical level as well as the risk from senior business stakeholders making poor critical decisions around strategy and budgets. Interestingly, the increase in reported skills shortages contrasts with a decrease in those reporting a lack of experience being a market factor. This suggests that as the industry matures the shortage of experienced, senior managerial professionals will reduce and the problem will be felt most acutely in the hands-on technical disciplines.

“The survey highlights the continued need for industry, government, academia and professional organisations like the IISP to continue to work hard to attract new entrants and younger people into the industry,” said Piers Wilson, author of the report and Director at the IISP. “This year, over 75% of respondents had a degree and over a third had a post graduate Masters Degree – an increase of over 5%, reflecting the increasing number of university programmes. While this is very encouraging, we also need to develop other routes into the industry to harness talent from diverse backgrounds.”

“It is still the case that technical IT security disciplines don’t always get their share of respect, yet these are the people at the front line defending systems and companies from attack and keeping one step ahead of the cyber criminals,” adds Wilson.

Despite a lack of wider recognition, the security industry is increasingly lucrative and provides a strong career path for those with the right skills and abilities. Some three-quarters of respondents reported positive job and career prospects, with 28.6% earning between £50 to £75k and almost 20% on salaries over £100k.

“The challenges around hiring and retention are putting an upward pressure on salaries,” says Piers Wilson. “But while money and career opportunities were cited as the most common reasons for taking and leaving jobs, other factors include variety of work, management and company culture, research and learning and autonomy.”

“Many of the figures in this year’s survey show a step in the right direction,” says Piers Wilson, “The continuing high frequency of cases hitting the headlines and the regulatory pressures, including from GDPR, are leading to a corresponding increase in investment and a drive for increased skill, experience, education and professionalism. However, there is still a lot of work to do and we need to redouble our efforts to meet the challenge of increasingly sophisticated threats.”

Along with surveying its diverse membership of over 2,500 people, this time the IISP opened the survey up to non-member security professionals. The respondents to the survey represent a wide range of ages, experience and industry sectors and so provide a very accurate picture of the state of UK businesses in terms of skills shortage issues, the state of security preparedness and risk awareness.

A copy of the IISP white paper on the results of the survey is available here: https://www.iisp.org/imis15/iisp/About_Us/IISP_Media/iispv2/About_us/IISP.aspx?hkey=866b64e2-77f2-4159-9acd-134c01ae54cf.

About the IISP
The Institute of Information Security Professionals (IISP) is a not-for-profit organisation, owned by its members, dedicated to raising the standard of professionalism in information security and the industry as a whole. The IISP does this through accrediting skills and competence, by sharing best practice and by providing a network of support and guidance on individual skill development. It speaks with an authoritative voice and its competency based memberships are widely recognised in the information security industry.

Working closely with the information security community, the IISP has a growing membership of over 2,800 individual members across private and government sectors, 44 Corporate Member Organisations and 19 Academic Partners.

At the heart of the Institute is the IISP Skills Framework ©2017 which is widely accepted as the de facto standard for measuring competency of information security professionals. The NCSC has taken this framework to underpin a range of certification schemes including the Certified Professional Scheme (CCP), for which the IISP is the leading certifying body and to develop syllabuses for Masters Degrees.

The skills framework is used extensively by our corporate members to benchmark and develop capability of their employees. It also been adopted by e-Skills UK to develop a National Occupational Standard for Information Security. The IISP also accredits training courses offered by commercial training providers against the Institute’s Skills Framework. This enables attendees to build knowledge in areas of the skills framework where they might have gaps and to gain hands-on experience.

More information about the IISP and its work can be found at www.iisp.org

About the author:

Related Posts

Leave a comment

Lastest Posts

  • ZTE among 3GPP 5G Air Interface standard editors

    19 April 2017, Shenzhen, China – ZTE Corporation (0763.HK / 000063.SZ), a major international provider of telecommunications, enterprise and consumer technology solutions for the Mobile Internet, today announced that Mr. Sergio Parolari and Mr. Yang Li from ZTE have become editors for 5G new radio (5G NR) air interface protocols at the 3GPP radio access…

  • View All »

RSS Latest Technology News World "Touch With Us"

  • ZTE and VEON Sign a Global Framework Agreement on NFVI and vEPC
    April 20 2017, Shenzhen, China – ZTE Corporation (0763.HK / 000063.SZ), a major international provider of telecommunications, enterprise and consumer technology solutions for the Mobile Internet, and VEON, today signed a global framework agreement on network function virtualization infrastructure (NFVI) and virtual evolved packet core (vEPC), creating a new era of cooperation in virtualisation technology...
  • Mahindra Comviva launches MobiLytix™ Centralized Communication Manager to improve customer engagements and revenues
    Streamlines customer interaction with operator tools and service alert systems Manages lifecycle triggers for relevant, holistic and multi-channel customer engagement with operator’s customer New Delhi, India – 20 April 2017: Mahindra Comviva, the global leader in mobility solutions, today announced the launch of MobiLytix™ Centralized Communication Manager, a unified, intelligent and analytically driven communication platform...
  • British public continues to embrace digital fitness technology, as the nation strives for greater well-being
    30% of Brits claim fitness technology is key fitness driver finds survey from TCS, London Marathon’s Official Technology Partner As the Official Technology Partner for the Virgin Money London Marathon for the second year, Tata Consultancy Services (TCS), (BSE: 532540, NSE: TCS), has launched the results of its second “Digital Fitness Survey.” The survey reveals...
  • Samsung Galaxy Book with Verizon unlimited: the perfect 2-in-1 PC for your mobile business
    NEW YORK – Verizon today announced that it will carry the Samsung Galaxy Book, a stylish 2-in-1 PC solution with advanced computing technology that offers powerful performance on Verizon unlimited. The 12-inch Super AMOLED Galaxy Book will be available on April 21. Need to stay connected and productive even when you’re not in the office? The...
  • UKCloud wins 2017 Queen’s Award for Enterprise for Innovation
    London – 21 April 2017 – UKCloud, the easy to adopt, easy to use and easy to leave assured cloud services company, can today reveal that it has received its first Queen’s Award for Enterprise for Innovation. The Queen’s Award for Enterprise scheme is highly competitive, rewarding businesses for outstanding achievements in International Trade, Innovation,...

Connect with Us

About us

TechRecur.com to be Contd...

Back to Top