Building the cyber security profession with talented people
Security professionals are playing an increasingly vital role. They help us maintain our way of life as we depend more and more on the availability, confidentiality and integrity of key systems for national defence, the supply of critical services, and the digital economy
The increasing interdependence of systems means the potential impact of failure is much greater. We need to demand excellence from our cyber security professionals as they develop new technologies and software, set policies, assess risks and protect our networks. Cyber security is becoming a prominent, highly regarded profession offering many varied career paths which together underpin the social, political and financial fabric of modern society. But perhaps this is not well understood. Many people do not have any feel for what cyber security professionals do all day and perhaps this is why we have a problem.
Whilst the need for a bright, dedicated, and quick-thinking cyber security workforce is growing, the number of skilled candidates is not. Recent statistics from Microsoft suggest that the IT industry will create 78,000 jobs in the UK in the next four years but research from the government body e-Skills confirms a 50% decline in young UK residents entering IT careers during the last five. In a new survey sponsored by the Sans Institute 90% of cyber security professionals reported current difficulty in recruiting skilled people to the whole range of cyber security jobs and nearly 60% expect an increase in the number of jobs (see www.cybersecuritychallenge.org.uk) . We need to ensure that there are enough new recruits and that they are sufficiently equipped with the increasingly diverse range of cyber and interpersonal skills businesses and government need.
We need to encourage greater interest in our profession; illustrate its interest and diversity provide people with positive channels for their talents, and offer clear career paths to the different recognised and respected roles in information security. The Cyber Security Challenge UK has been set up to achieve this.
The Challenge is a set of virtual competitions, designed around the skills most needed, and used to identify and encourage the next generation of cyber security experts. It is a new concept in the UK and will use a series of online games of differing style and complexity to attract and inspire. Finalists will be invited to a series of face to face workshops where they will be challenged further, tested on more diverse skills, and receive training. The objective is to excite entrants about the variety of skills needed; demonstrate the job prospects available to them, and reward the most talented with prizes that will help them progress their career. This might include an apprenticeship with a leading organisation or a scholarship for a university place.
Launching this month, the Challenge is supported by a broad group of organisations from the private, public and academic sectors. This includes membership organisations such as the Institute for Information Security Professionals, individual companies such as the Sans Institute and QinetiQ, an industry group comprising leading figures from finance, oil and gas, power and telecommunications. The Cabinet Office, Office of Cyber Security is representing government departments.
Cyber Security is a growing concern for both businesses and government. The UK needs to sow seeds now to reap the benefits of a highly trained and motivated new generation of cyber security professionals capable of securing our personal, business and national interests.
Judy Baker, Director, Cyber Security Challenge UK , www.cybersecuritychallenge.org.uk
