UK Cyber Security Council calls for skills investment

Share
As the nation recovers from the impact of COVID-19, investment in cyber security skills and training will be critical, says the UK Cyber Security Council

The UK Cyber Security Council, which is the self-regulatory body for the cyber security education and skills sector, today issued a call for industries to recommit to investment in cyber security skills development, as they transition back to regular working practices following the disruption caused by the COVID-19 pandemic.

Research by the London School of Economics during lockdown revealed that organisations’ approaches to training have shifted, with firms increasingly taking the quick-fix approach through recruitment rather than a broader training approach across wider teams. The total number of days trained per trainee in the UK dropped from 7.8 in 2011 to 6.4 in 2017, a fall of 18%, while total training expenditure per trainee fell by 17%. The decline applies across a variety of sectors, including cyber security.

This trend has worsened during the pandemic, which has forced many companies to either scale back spending or simply try to meet the challenge of delivering existing training programmes and course materials to a new remote workforce.

 

Challenge to find the skills

 

The skills challenge is supported by the latest data from the Department for Digital, Culture, Media and Sport, which revealed that 30% of cyber firms have found it hard to fill generalist roles (where employees are expected to work in a range of cyber security areas). Shortages also exist in specialist roles, senior management roles, penetration testing and security architecture – all pointing to a shortfall in employee development.

“It's imperative that the UK’s cyber security community returns to training in order to maintain their on-going situational awareness and to maintain the UK’s global position as a centre for cyber security skills and innovation,” said Don MacIntyre, interim CEO of the UK Cyber Security Council. 

“While investment in specific skills development courses, setting staff on a pathway to certification is essential, it needs to be teamed with continuous education that can build on industry accreditation and ensure professionals are constantly developing their skills and knowledge as part of a career pathway as well as to support the evolving needs of their organisation,” MacIntyre added. 

 

Share

Featured Articles

Cisco Talos: Tracking Ransomware’s 35 Year Evolution

Martin Lee, Technical Lead for Security Research, Cisco Talos highlights how the ransomware landscape has shifted across the last 35 years

Resilience: Firms Fail to Grasp Cyber Financial Impact

Resilience and YouGov survey reveals 74% of mid to large UK businesses face cybercrime, while ransomware understanding lags behind data breach concerns

SonicWall and CrowdStrike Unite for SMB Security Service

SonicWall partners with endpoint protection specialist CrowdStrike to offer managed detection and response capabilities through managed service providers

FS-ISAC CISO Talks Cyber Strategies for Financial Providers

Cyber Security

Darktrace Reports 692% Surge in Black Friday Cyber Scams

Cyber Security

KnowBe4 Launches AI Agents to Counter Phishing Threats

Technology & AI