A recent survey found that the majority of organizations struggle to retain cybersecurity workers. By focusing on improving retention, businesses can also reduce their digital risk.  

Increased Retention Concerns

As new cybersecurity concerns increase, businesses also face an uphill battle to retain the talent needed to keep their data safe. A recent State of the Cybersecurity Workforce study reported that 43% of organizations saw an increase in attacks in the last year. It’s even more challenging to deal with this when they are constantly filling open positions. That means inexperienced workers or not enough people handling the infrastructure. 

A key finding from the report was that 60% of respondents have issues retaining cybersecurity workers. That’s a 7% increase from last year. Plus, 63% of respondents have open positions. The survey included multiple industries, with 25% of respondents in the technology services/consulting industry, 21% in finance and 16% in the government. 

The report also found a connection between increased attacks and retention issues. Of respondents who faced more attacks in the past year, 69% report being somewhat or very understaffed. This finding illustrates the critical nature of addressing retention issues as a key part of reducing risk and vulnerabilities. However, the study also found that lower retention rates make it harder to retain employees going forward. 73% of groups who are very understaffed reported challenges retaining workers.

Reasons for Retention Issues

The survey notes that the lower retention numbers are likely due, at least in part, to the current tensions between employees and leadership throughout all departments and industries. Many workers want to continue the flexibility of remote working, while some employers want their staff at the physical office building. Many companies have made changes to return-to-work mandates in hopes of reducing attrition, but there is not enough data yet to determine if these changes make an impact on cybersecurity retentions. 

Other reasons cited by respondents for retention challenges include:

  • Recruited by other companies (59%)
  • Poor financial incentives (48%)
  • Limited promotion and development (47%)
  • High work stress levels (45%)
  • Lack of management support (34%).

Importance of Retention Will Increase in the Future

Because the demand for the cybersecurity profession is only going to increase, organizations that have low retention rates will struggle even more. 92% expect the demand for technical cybersecurity workers to increase in the future. Plus, 63% predict an increase in demand for executive-level workers in this field.

The key is to focus not only on reducing cybersecurity risk but on hiring and retaining top talent. By creating a positive work environment that includes competitive benefits, professional development and an upward career path, you can retain cybersecurity workers while improving cyber defenses.

More from News

The White House on Quantum Encryption and IoT Labels

A recent White House Fact Sheet outlined the current and future U.S. cybersecurity priorities. While most of the topics covered were in line with expectations, others drew more attention. The emphasis on critical infrastructure protection is clearly a top national priority. However, the plan is to create a labeling system for IoT devices, identifying the ones with the highest cybersecurity standards. Few expected that news. The topic of quantum-resistant encryption reveals that such concerns may become a reality sooner than…

Malware-as-a-Service Flaunts Its Tally of Users and Victims

As time passes, the security landscape keeps getting stranger and scarier. How long did the “not if, but when” mentality towards cyberattacks last — a few years, maybe? Now, security pros think in terms of how often will their organization be attacked and at what cost. Or they consider how the difference between legitimate Software-as-a-Service (SaaS) brands and Malware-as-a-Service (MaaS) gangs keeps getting blurrier. MaaS operators provide web-based services, slick UX, tiered subscriptions, newsletters and Telegram channels that keep users…

New Survey Shows Burnout May Lead to Attrition

For many organizations and the cybersecurity industry as a whole, improving retention and reducing the skills gap is a top priority. Mimecast’s The State of Ransomware Readiness 2022: Reducing the Personal and Business Cost points to another growing concern — burnout that leads to attrition. Without skilled employees, organizations cannot protect their data and infrastructure from increasing cybersecurity attacks. According to Mimecast’s report, 77% of cybersecurity leaders say the number of cyberattacks against their company has increased or stayed the…

Alleged FBI Database Breach Exposes Agents and InfraGard

Recently the feds suffered a big hack, not once, but twice. First, the FBI-run InfraGard program suffered a breach. InfraGard aims to strengthen partnerships with the private sector to share information about cyber and physical threats. That organization experienced a major breach in early December, according to a KrebsOnSecurity report. Allegedly, the InfraGard database — containing contact information of over 80,000 members — appeared up for sale on a cyber crime forum. Also, the hackers have reportedly been communicating with…