Striving to solve the security skills crisis

The Cyber Security Challenge is doing a fine job, but flat registration growth and weak Government funding are cause for concern, Tom Brewster discovers.

"This year we saw lots more players evolving those skills and they were able to narrow in on what information really mattered from a security perspective, what information needed to be actioned, and they were redacting less relevant stuff.

"This was something that was exceptionally visible in the winner Tim. There was real insight into the use case of his analysis."

You do the math

For all the Challenge's progress, however, there are some areas where it has not come along so well. For starters, there was no rise in registrants this year. Just as in 2011, 4,000 applied to take part. Given many participants were re-entrants from last year, growth must have been fairly flat. Despite Baker's insouciance when asked if she was bothered by the stunted rise of the Challenge, this must have stung a little.

Advertisement
Advertisement - Article continues below

Spending miniscule amounts on addressing the skills gap isn't just a false economy, it's bordering on the moronic.

There was also a decline in the number of female participants. This is something Baker has promised to work on, just as she did last year, but it remains to be seen if girls will ever be as interested as boys in IT security.

Yet the core issue plaguing the search for security talent is a somewhat base one: funding. It's what is behind the Challenge's abortive attempts to boost marketing efforts and add more registrants.

"I'm not surprised the number didn't go up hugely from last year because we didn't do intensive marketing at the time of the registration process and we had about as many participants as we could cope with," Baker said.

"We haven't got the money to do extensive marketing. We've got loads of room to grow and as sponsor funding flows through that's precisely what we will do. We know exactly how we want to do it, we just have to be funded to do it."

"The key area for improvement is to make sure the project is sustainable, keeping it going year by year and steadily build the size of it, but without losing that sense of fun and novelty," added CEO Hine, pithily summing up the Challenge's challenge.

Industry can and is assisting in this area. Although they are doing their bit, it would be positive to see giants of the security world, like Symantec and McAfee, doing a little more. But it is not really their prerogative to get this going, especially considering the major players in the security industry are not British. It is the Government who should be doing more.

Whilst the Coalition has committed to an undertaking assuring 180,000 will be handed to the Challenge each year until 2015, more needs to be spent on producing stellar security talent.

There has been plenty of blustering from Government about cyber threats and little substance to back it up. The 650 million pot dedicated to security is not enough that's the consensus amongst industry players and researchers. Spending miniscule amounts on addressing the skills gap isn't just a false economy, it's bordering on the moronic.

Outside of the obvious privacy and national security issues, there are economic concerns at work her too. If the Government doesn't inject more cash into the hunt for talent, there will be more data breaches. More data breaches mean more cost for companies. In turn, the economy will take a hit when firms head elsewhere.

Advertisement
Advertisement - Article continues below

Why would businesses want to settle where they can't get decent security? Why would they come to the UK where lax security is punished by hefty fines? They wouldn't. We need security skills and we need them fast.

Featured Resources

The essential guide to cloud-based backup and disaster recovery

Support business continuity by building a holistic emergency plan

Download now

Trends in modern data protection

A comprehensive view of the data protection landscape

Download now

How do vulnerabilities get into software?

90% of security incidents result from exploits against defects in software

Download now

Delivering the future of work - now

The CIO’s guide to building the unified digital workspace for today’s hybrid and multi-cloud strategies.

Download now
Advertisement

Most Popular

Visit/business-strategy/digital-transformation/354201/boston-dynamics-dog-like-robots-sniff-out-bombs-for
digital transformation

Boston Dynamics dog-like robots sniff out bombs for Massachusetts police

26 Nov 2019
Visit/business-strategy/mergers-and-acquisitions/354191/xerox-threatens-hostile-takeover-after-hp-rebuffs
mergers and acquisitions

Xerox threatens hostile takeover after HP rebuffs $30bn takeover

22 Nov 2019
Visit/security/data-breaches/354192/t-mobile-data-breach-affects-more-than-a-million-users
data breaches

T-Mobile data breach affects more than a million users

25 Nov 2019
Visit/mobile/google-android/354189/samsung-galaxy-a90-5g-review-simply-the-best-value-5g-phone
Google Android

Samsung Galaxy A90 5G review: Simply the best value 5G phone

22 Nov 2019