CVE-2024-3400: PAN-OS Command Injection Vulnerability in GlobalProtect Gateway. Learn More

CVE-2024-3400: PAN-OS Command Injection Vulnerability in GlobalProtect Gateway. Learn More

Services
Capture
Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

twi-managed-portal-color
Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

twi-briefcase-color-svg
Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

tw-laptop-data
Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

twi-database-color-svg
Database Security

Prevent unauthorized access and exceed compliance requirements.

twi-email-color-svg
Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

tw-officer
Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

tw-network
Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Security Operations Platform
Trustwave Security Colony
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats

The Cybersecurity Skills Gap is Real, Now What?

Industry estimates suggest more than one million unfilled security jobs exist worldwide. But filling those jobs is difficult as ISACA, an association of IT professionals, points out: 35 percent of security pros say they are unable to fill open positions, 53 percent say it takes three to six months to find a qualified candidate and only 16 percent believe at least half of their applicants are qualified.

The result? ESG, an IT analyst and research firm, says that 83 percent of enterprises find it "extremely difficult" or "somewhat difficult" to recruit and hire security professionals, and ISACA notes that fewer than half of cybersecurity professionals believe their security teams are able to detect and respond to complex incidents.

There is a lot going on in our industry that focuses on the "here and now" part of the problem. The immediate, short-term pieces of the intricate puzzle include training and certifications, collaboration and sharing, innovations in technology like automation and threat intelligence, and resource-friendly deployment models like the cloud and managed security services.

But what are we doing for the future? Obviously, we need to consider the long view as well. A revealing stat from Code.org found that less than 2.4 percent of graduating students hold computer science degrees. As a nonprofit dedicated to expanding access to computer science, the group is certainly doing its part. But what about the rest of the industry? What are we doing to step up?

Just this week, Trustwave and LifeJourney, a company that provides online career simulation experiences, announced a new initiative that may not solve the global skills shortage, but certainly is one important step toward it. LifeJourney will provide the platform and access for Trustwave security experts to offer students the resources and mentorship they need to discover and develop future careers in cybersecurity. More details are available here.

By teaming with LifeJourney on this initiative, students gain an informative and engaging opportunity to explore the challenging world of cybersecurity, to choose this exciting career path, and to join in the cause to fight cybercrime, protect data and reduce risk.

You'll see more from Trustwave in this arena as we're actively working on helping to fill the cybersecurity skills gap. And for a broader visual view into why an endeavor like this one is needed, check out this infographic from ISACA.

Cas Purdy is VP of corporate marketing and communications at Trustwave.

Latest Trustwave Blogs

Law Enforcement Must Keep up the Pressure on Cybergangs

The (apparent) takedown of major ransomware players like Blackcat/ALPHV and LockBit and the threat groups’ (apparent) revival is a prime example of the Whack-a-Mole nature of combating ransomware...

Read More

Effective Cybersecurity Incident Response: What to Expect from Your MDR Provider

Companies engage with a managed detection and response (MDR) provider to help ensure they detect cyber threats before they do any damage. The "response" part of the MDR moniker is key to that effort,...

Read More

The Power of Red and Purple Team Drills in Enhancing Offensive Security Programs

Despite investing in costly security solutions, keeping up with patches, and educating employees about suspicious emails, breaches still occur, leaving many organizations to wonder why they are...

Read More