The Severe Shortage of Cybersecurity Professionals is a Key Risk to Our Nation's Security

WASHINGTON, Oct. 9, 2018 /PRNewswire/ -- The unprecedented demand for well-trained cybersecurity workers continues to grow. Some experts predict that there will be a global shortage of two million cybersecurity professionals by next year. This is critical considering the increase in cyberattacks and the erosion of consumer trust in the ability to protect the internet. Enlisting the next generation of skilled cybersecurity workers and training existing employees will help build stronger defenses and restore confidence among digital citizens.

During the second week of National Cybersecurity Awareness Month (NCSAM), an online safety awareness initiative co-led by the National Cyber Security Alliance (NCSA) and the U.S. Department of Homeland Security, key influencers ‒ like parents, teachers and employers ‒ are urged to motivate prospective talent of all ages to pursue this rewarding career. It is important to remember that it's not all about math and tech – there is definitely another side to cybersecurity. According to an article in the Harvard Business Review, important attributes of accomplished cybersecurity professionals include curiosity and a passion for learning, problem solving skills, strong ethics and a keen understanding of risks. In addition, job seekers with nontraditional backgrounds may bring new experience and perspectives to the position. And, a variety of industries ‒ ranging from education, financial institutions and banks to fashion, design and retail – are hiring. The bottom line is that the profession is dedicated to helping make our borderless online world safer and more secure for everyone.

Although they are often behind the scenes, these experts are truly on the front lines and have a measurable impact in our digital lives. One leading example of a company that prioritizes security and has long invested in hiring top cybersecurity talent is Intel. Security engineers and researchers at Intel not only strengthen the security of its own products, but also learn and share with the broader community to help collectively develop and accelerate the adoption of more secure technologies across the entire computing industry. The bottom line is that the profession is dedicated to helping make our borderless online world safer and more secure for everyone.

Parents, caregivers, counselors and teachers can play a significant role in paving the way for children to pursue cybersecurity careers. It's important for these influencers to learn about and have conversations with kids about the breadth of opportunities available. In addition to a focus on STEM ‒ a curriculum based on educating students in science, technology, engineering and mathematics ‒ there are quite a few interesting and fun options to explore. Here are a couple of NCSA's top recommendations:

• GenCyber offers summer cybersecurity camp experiences for K-12 students and teachers. The goal is to help all students understand safe online behavior, grow diversity and interest in cybersecurity and improve teaching methods for delivering content.
• CyberPatriot focuses on national youth cybersecurity education with three main programs: the National Youth Cyber Defense Competition, AFA CyberCamps and the Elementary School Cyber Education Initiative. The Air Force Association developed CyberPatriot to excite students about careers in cybersecurity and other STEM disciplines critical to our nation's future.
• Visit CyberCompEx to learn about Capture the Flag exercises and other age-appropriate challenges that are great ways to expose kids to cybersecurity.

Check out the latest NCSAM infographic for more information and inspiration regarding cybersecurity careers.

"A highly skilled, motivated and passionate cybersecurity workforce is just as critical to the internet's security as everyone's role in helping to protect it," said Russ Schrader, NCSA's executive director. "Inspiring kids when they're young can propel them into a gratifying career that matches their interests in a specific sector like education, finance or health. In addition, jobs in cybersecurity are highly portable and pay well while doing something good."

For adults thinking about a new career or re-entering the job force, consider re-inventing yourself and pursuing various positions in cybersecurity. Technical skills can be acquired through a number of ways, including traditional college courses, vocational training, industry certifications and on-the-job experience. Experts acknowledge that a workforce with diverse expertise and backgrounds has a greater chance of defending our assets.

As for veterans who are transitioning back into civilian life, you may already have the training and skills that are extremely advantageous to cybersecurity. In addition to potential practical computing and/or IT skills, according to a recent blog in Information Security, there are a number of highly marketable at "strengths" that you most likely acquired in the armed forces. These may include:

• Leadership training
• Ability to work as part of a team
• Ability to work under pressure and with short deadlines
• Planning and organizational skills
• Familiarity with safety and security
• Understanding of protocols and structures
• Good work habits
• High personal drive and pursuit of excellence
• Personal initiative

The blog also indicates that other advanced training may be applicable. And even if you were serving a non-technical role in the military, you may still be a valuable hire based on your security clearance alone.

Top Tips for the Cybersecurity Job Seeker

• Get Credentialed: Four out of five cybersecurity jobs require a college degree.
• Get Experience: Test the waters through volunteer work and internships; offer to help IT professors at your local college/university or employer to gain insight and experience. Think about becoming a white hat hacker and help top tech companies find bugs within their software.
• Get Smart: Keep up with the latest on internet security; follow top cybersecurity personalities on Facebook or Twitter and stay on top of the headlines. Join the conversation #CyberAware on Twitter and Facebook.
• Get Ready: A great place to find out if a cybersecurity career is right for you is to start at the National Initiative for Cybersecurity Careers and Studies (NICCS). From career resources to learning more about jobs in the field, NICCS is a go-to-guide to learning about and joining the ranks of a cybersecurity professional. Learn more at http://niccs.us-cert.gov/.

Advice for Parents, Teachers Counselors

• Volunteer at school, an after-school program, boys and girls clubs and community workshops to teach kids about online safety and cybersecurity careers.
• Expose students to opportunities in the field of cybersecurity by hosting an open house at your company to talk about what your cybersecurity department does.
• Inspire students to learn about cybersecurity by mentoring a team in a cyber challenge or hosting events and afterschool programs.
• Work with your schools or community-based organizations to create an internship program for hands-on learning.
• As a parent, learn about the "educational steps" to a career in cybersecurity and about community organizations that host cyber camps to educate kids about internet safety and security.                                                       

Advice for Companies to Help Tackle the Talent Shortage

• Re-examine your workforce strategy: Do you know what skills you need today and tomorrow to run a successful security program? Realize that skills and experience can come from a variety of places and adjust your hiring efforts accordingly.
• Improve your engagement and outreach: Don't limit yourself to the same career fairs and recruiting programs of yesteryear. Get involved in community colleges, P-TECH schools and other educational programs to start building your recruiting base.
• Build a local cybersecurity ecosystem: Connect with government organizations, educational institutions, and other groups. Sponsor Capture the Flag events and work with local middle and high schools to generate interest in the field. These groups are always looking for willing experts and mentors.
• Have a robust support program for new hires: Mentorships, rotational assignments, shadowing and other opportunities help new cybersecurity hires gain experience and learn. Remember, not everyone knows what they want to do right away. Keep new hires engaged by giving them the creative freedom to work on different projects and explore new technologies and services.
• Focus on continuous learning and upskilling: To retain new talent, keep employees current on the latest skill sets through classes, certifications, and conferences. Be open to employees from other areas of your business who express interest in cybersecurity career paths. AI now provides employees with more intelligence and contextual recommendations at a speed and scale previously unimagined, so upskilling your workforce is a completely different ballgame these days.

Resources

• NCSA's Parent Primer for Guiding Kids to Careers in Cybersecurity 
• DHS partners with Hire Our Heroes to encourage transitioning veterans to consider cybersecurity as a future career after their military service ends. Veterans are granted access to the Federal Virtual Training Environment (FedVTE) through this program to access online training courses ranging from beginner to advance at no cost to users.
• CyberCorps^®: Scholarship for Service is a program sponsored by DHS, National Science Foundation and Office of Personnel Management that provides scholarship opportunities to undergraduate and graduate students who are interested in studying cybersecurity and related degree programs. Qualified participants receive stipends of $22,500 for undergraduate and $34,000 for graduate studies and have access to government internship opportunities throughout the program to gain hands-on experience.
• DHS and the National Security Agency jointly sponsor the prestigious National Centers of Academic Excellence (CAE) program. Academic institutions are designated as either CAEs in Cyber Defense or Cyber Operations, and have undergone an in-depth assessment and met rigorous requirements in order to garner this designation. From associates to doctorates, interested students can apply to one of the 240+ colleges across the Nation and study cybersecurity disciplines in top CAE schools.
• Starting the week of Oct. 8, you can test your cyber know-how by taking a fun quiz developed by global security and aerospace company Lockheed Martin.  At the end of the quiz, you'll receive tailored resources to help expand your knowledge in this important field.
• Check out the Cyber Seek cybersecurity supply/demand heat map to see where the cybersecurity jobs are near you: https://www.cyberseek.org/heatmap.html

Events

• Symantec Webinar: Millions of Rewarding Jobs: Educating For a Career in Cybersecurity, Wednesday, Oct. 10, 1 p.m. EDT/10 a.m. PDT ‒ Join Symantec nonprofit partners YearUp and AAUW to address ways to build the cybersecurity workforce and how to inspire students to seek highly fulfilling cybersecurity careers. Speakers: David Bradbury, Symantec Chief Security Officer; AAUW & YearUp Symantec Career Connection site: https://www.symantec.com/about/corporate-responsibility/your-information/cyber-career-connection
• EDUCAUSE Live! Webinar: Campus-Wide Two-Factor Authentication (2FA) Saturation Campaign, Thursday, October 11, 1:00-2:00 p.m. EDT  This presentation by Robert Jorgensen will discuss how Utah Valley University partnered with NCSA to promote the adoption of 2FA for the student population using a multifaceted saturation campaign. https://events.educause.edu/educause-live/webinars/2018/campus-wide-two-factor-authentication-2fa-saturation-campaign
• Identity Theft: The Aftermath hosted by Identity Theft Resource Center Thursday, October 18th, Washington D.C. 9:00 a.m. – 1:00 p.m. at Google HQ with industry experts, media, government and advocates. Identity crimes create more than just a financial impact. Victims experience emotional, behavioral and lost opportunity-costs. Join the ITRC for the release of our Aftermath trend analysis. This half-day morning session will also include insights from victims and expert-led workshops. Full survey results of the Identity Theft: The Aftermath 2018 report will be published in Q2 2019. Registration website: https://www.idtheftcenter.org/aftermath2018/

About National Cybersecurity Awareness Month
National Cybersecurity Awareness Month (NCSAM) was created as a collaborative effort between government and industry to ensure every American has the resources they need to stay safer and more secure online. Now in its 15th year, NCSAM is co-led by the Department of Homeland Security and the National Cyber Security Alliance, the nation's leading nonprofit public-private partnership promoting the safe and secure use of the internet and digital privacy. Recognized annually in October, NCSAM involves the participation of a multitude of industry leaders ‒ mobilizing individuals, small and medium-sized businesses, nonprofits, academia, multinational corporations and governments. Encouraging digital citizens around the globe to STOP. THINK. CONNECT.™, NCSAM is harnessing the collective impact of its programs and resources to increase awareness about today's ever-evolving cybersecurity landscape. Visit the NCSAM media room: staysafeonline.org/about-us/news/media-room/.

About the National Cyber Security Alliance  
NCSA is the nation's leading nonprofit, public-private partnership promoting cybersecurity and privacy education and awareness. NCSA works with a broad array of stakeholders in government, industry and civil society. NCSA's primary partners are DHS and NCSA's Board of Directors, which includes representatives from ADP; AT&T Services Inc.; Bank of America; CDK Global, LLC; CertNexus; Cisco; Cofense; Comcast Corporation; ESET North America; Facebook; Google; Intel Corporation; Marriott International; Mastercard; Microsoft Corporation; Mimecast; NXP Semiconductors; Raytheon; Salesforce; Symantec Corporation; Visa and Wells Fargo. NCSA's core efforts include National Cybersecurity Awareness Month (October); Data Privacy Day (Jan. 28); STOP. THINK. CONNECT.™, the global online safety awareness and education campaign co-founded by NCSA and the Anti-Phishing Working Group with federal government leadership from DHS; and CyberSecure My Business™, which offers webinars, web resources and workshops to help businesses be resistant to and resilient from cyberattacks. For more information on NCSA, please visit staysafeonline.org/about-us/overview/.  

About STOP. THINK. CONNECT.™
STOP. THINK. CONNECT. is the global cybersecurity education and awareness campaign. The campaign was created by an unprecedented coalition of private companies, nonprofits and government organizations with leadership provided by the National Cyber Security Alliance and the Anti-Phishing Working Group. The U.S. Department of Homeland Security leads the federal engagement in the campaign. Learn how to get involved at stopthinkconnect.org. 

SOURCE National Cyber Security Alliance

Related Links

http://www.staysafeonline.org