September 17, 2018 By Laurie Gibbett 2 min read

Co-authored by Robert Calvert.

Again and again in the security industry, we hear the same challenge: Organizations are struggling to hire enough people with the right security skills. In fact, research from the Center for Cyber Safety and Education predicted that there will be a shortfall of 1.8 million cybersecurity workers by 2022. So what do we do?

Uniting to Provide Valuable Opportunities to Undergrads

For a start, the public and private sectors must work together to train the next generation of cyber professionals. This includes industry programs to improve security skills, such as the Cyber Security Challenge U.K., and government-led initiatives such as the National Cyber Security Centre (NCSC)’s CyberFirst program. Private sector organizations are on the hunt for top talent, and they have a responsibility to provide these types of opportunities to alleviate the security skills shortage. As part of the NCSC’s CyberFirst program, IBM recently hosted a cohort of high-achieving science, technology, engineering and mathematics (STEM) undergraduates from across the U.K.

IBM is uniquely positioned to assist in this endeavor by providing access to industry-leading expertise from across the U.K. and Europe, coupled with a diverse and engaging set of opportunities. Within the program, participants were introduced to and received hands-on training for a range of IBM tools. This included IBM’s security information and event management (SIEM) platform, QRadar, incident response through the Resilient platform, and information analysis via the analyst’s notepad, i2.

In addition to the tool-based elements, participants also got a chance to work with experts from our incident response team, X-Force Incident Response and Intelligence Services (IRIS), and our penetration team, X-Force Red. Challenges ranged from navigating a breach scenario in a fictitious company to hardware hacking a Raspberry Pi in a race-against-the-clock timing attack.

Why We Need a Joint Approach to Developing Security Skills

The course was a standout success. All participants who were interviewed at the end of the training reported a significant development in soft skills, technical skills and industry knowledge. The program’s results demonstrate the viability of intensive training for new starters in the cybersecurity industry, the benefits of recruiting more widely within STEM backgrounds and the positive results to be gained from industry-government partnerships. This joint approach to training is a great example of how the private and public sectors can work together to close the security skills gap and offer more opportunities to potential cyber talent.

Learn about IBM Cyber Days for Collegiate Women and register for an upcoming event

More from CISO

X-Force Threat Intelligence Index 2024 reveals stolen credentials as top risk, with AI attacks on the horizon

4 min read - Every year, IBM X-Force analysts assess the data collected across all our security disciplines to create the IBM X-Force Threat Intelligence Index, our annual report that plots changes in the cyber threat landscape to reveal trends and help clients proactively put security measures in place. Among the many noteworthy findings in the 2024 edition of the X-Force report, three major trends stand out that we’re advising security professionals and CISOs to observe: A sharp increase in abuse of valid accounts…

Boardroom cyber expertise comes under scrutiny

3 min read - Why are companies concerned about cybersecurity? Some of the main drivers are data protection, compliance, risk management and ensuring business continuity. None of these are minor issues. Then why do board members frequently keep their distance when it comes to cyber concerns?A report released last year showed that just 5% of CISOs reported directly to the CEO. This was actually down from 8% in 2022 and 11% in 2021. But even if board members don’t want to get too close…

The CISO’s guide to accelerating quantum-safe readiness

3 min read - Quantum computing presents both opportunities and challenges for the modern enterprise. While quantum computers are expected to help solve some of the world’s most complex problems, they also pose a risk to traditional cryptographic systems, particularly public-key encryption. To ensure their organization’s data remains secure now and in the future, chief information security officers (CISOs) should educate themselves about quantum computing, proactively address the coming quantum risks to cybersecurity and work to establish cryptographic agility in their enterprise.A future cryptographically…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today