Infosecurity Europe has published a new report analyzing the industry

Apr 17, 2014 19:37 GMT  ·  By

It’s becoming clear to everyone that information security is an important part of the IT industry and the recent data breaches and privacy issues have demonstrated it. While most infosec professionals say they’re satisfied with their job, a new study commissioned by Infosecurity Europe shows that there’s a skills shortage in the industry.

A total of 1,149 information security experts from all around the world have been surveyed for the study called “Information security: From business barrier to business enabler.”

Over half of respondents noted that their job satisfaction had changed over the past year. More than 81% feel that their job has become more enjoyable. 83% believe that this is the best time to be an information security professional.

Close to 35% of respondents believe that cyber security is the most technically demanding and stimulating field in IT. 45.5% of those who took part in the survey claim that their function is seen as “integral” to business strategy by their employers. More than 40% say that the media reports on information security have made it easier for them to explain why this aspect should be taken seriously.

On the downside, the study also highlights the fact that there is a skills shortage in the industry, which makes it more difficult for both the public and private sector to fight against cybercrime.

“Tackling the shortage is a key priority for governments, industry and the profession,” said John Colley, managing director of (ISC)² EMEA, in the report.

“As a relatively new profession, we have focused on recognizing the competencies of our first generation. In doing so, we have amassed a significant amount of knowledge that we must now put to broader use, to share our knowledge and experience with the academic community and take advantage of what the academic community has to offer in their ability to nurture talent in the young.”

The figures show that only 7% believe that cyber security is a “cool” subject. Close to 9% of the respondents say they would have chosen a different carrier path, 34% of them citing the poor quality of rewards and recognition.

The professionals whose jobs haven’t become more enjoyable over the past year say their business stakeholders are demanding airtight security without understanding the complexity and the challenges.

“The way organizations and people work today has dramatically changed,” said David Cass, senior vice president and CISO at Elsevier.

“Social, mobile and cloud require us to change the way that we practice information security. Having a long term vision and strategy that take these changes into account and align with the business strategy is critical. This is the foundation in making security a business enabler.”

The complete “Information security: From business barrier to business enabler” report is available on Infosecurity Europe’s website (registration required).