National Cyber Security Challenge launches to plug growing skills gap
Private and public sectors back national competitions to identify and nurture UK cyber security talent
A group of leading UK information security organisations has today announced that it will run a series of national public competitions to identify the UK's future cyber security workforce. The 'Cyber Security Challenge UK' brings industry leaders together to design, build and implement a range of national 'games' that replicate the problems cyber security professionals have to deal with every day. They will use the very latest technology to test the nation's cyber security skills, excite and inspire entrants to develop their talents, and identify the UK's future cyber security professionals.
The importance of the Challenge is highlighted by new research released today that demonstrates a growing skills gap in the cyber security sector, and the need to build a new pool of talented people to enter the profession in the years to come.
The 255 research respondents were mainly senior information security professionals, nearly half of whom have more than 10 years' experience. It was conducted for the consortium by the Sans Institute and gauged the scale of the issues the Challenge needs to tackle. The key findings include:
- Over 90% of those surveyed stated it was already difficult to recruit cyber security professionals
- Nearly 60% of respondents indicated that the number of cyber security jobs required to cope with attacks will increase in the coming years
- The job roles most difficult to recruit for are those in the fields of strategy/policy guidance, risk management, and threat management/incident response.
"We have to improve the quality and quantity of talented people entering the profession to accommodate escalating requirements," said Judy Baker, director of Cyber Security Challenge UK. "The current system is not delivering enough skilled professionals to meet the cyber security challenges we face. We need to excite, inspire and stimulate fresh interest in a career as a cyber security specialist. The competitions we are developing will do exactly that."
The Challenge will be delivered by a management team of cyber security experts. They include a range of industry, academic and public sector organisations. "We are supporting the Challenge because we believe that identifying and attracting the required cyber security talent is the starting point for professionalising a vital industry for national and business security," explains Gerry O'Neill, CEO of the Institute of Information Security Professionals. "We see huge value in working with the industry to create an environment for cyber security professionals where employers with a need and employees with relevant skills are identified and introduced, and are subsequently provided with professional career paths."
The team is already working with partners on ideas for three starter competitions in the fields of network defence, forensics, and identifying security weaknesses in website code. Each competition will be open to individuals of any age and profession but some will be targeted at school leavers and undergraduate students. The management team is also looking at various options for round two, including a series of face-to-face challenges for successful contestants that might allow them to pass at a level of proficiency recognised by the profession.
"Our members need excellent recruits to deal with the current cyber security threats in the UK," said Ian Glover from the Council of Registered Ethical Security Testers. "We are putting our own weight behind the Cyber Security Challenge UK and exploring a route whereby passing some challenges could be recognised as a benchmark of cyber security capability."
The consortium is also in the process of securing more sponsorship from both private and public sector supporters to ensure it can deliver a range of competitions across the UK. It is currently in talks with several high profile businesses that it expects to formally sign-up in the coming months.
"Our community spans hundreds of organisations across academia, industry and government. They all have a vested interest in building a greater pool of cyber security talent so we know that support for this initiative will grow rapidly." says Tony Dyhouse, director of the Cyber Security Programme for the Digital Systems KTN. "The Cyber Security Challenge UK is a perfect demonstration of what is possible when the industry comes together to solve a problem that effects everyone."
The full list of organisations represented in the Cyber Security Challenge UK management team is:
o The Digital Systems Knowledge Transfer Network
o The Institute of Information Security Professionals
o The Information Security Awareness Forum
o The Metropolitan Police
o The Cabinet Office, Office of Cyber Security
o Dtex Systems
o The Information Assurance Advisory Council
o Council of Registered Ethical Security Testers
o QinetiQ
o Field Fisher Waterhouse
o Royal Holloway, University of London
o Industry team representing leaders from finance, pharmaceuticals, oil and gas and power, telecommunications
More information on the Challenge can be found on the website www.cybersecuritychallenge.org.uk along with a detailed summary of the survey results and more information on how the national competitions will be run.
Any organisations interested in supporting the Challenge should contact the Cyber Security Challenge UK team at sponsorship@cybersecuritychallenge.org.uk or queries@cybersecuritychallenge.org.uk
