The Cybersecurity Workforce Crisis: A Growing Talent Gap

The global cybersecurity industry is facing a monumental challenge: it needs to nearly double its workforce to effectively protect businesses and organisations from the growing threat landscape. According to research from ISC2’s 2024 Cybersecurity Workforce Study, the global cybersecurity workforce requires an additional 4.8 million professionals, bringing the total needed to 10.2 million. Currently, around 5.5 million people are employed in this field, meaning there is a glaring shortfall of talent—an 87% increase in staffing is necessary to meet demand.

Escalating Need for Cybersecurity Talent

As businesses become increasingly dependent on technology, the need for cybersecurity expertise has surged. ISC2’s study reveals that the workforce gap grew by 19% in just one year, highlighting the widening disparity between available talent and the number of professionals needed to ensure robust security. If this gap continues to grow, organisations are at greater risk of falling prey to cyberattacks, which could have devastating consequences.

After two years of declining investment in hiring and professional development opportunities, organisations are now facing significant skills and staffing shortages—an issue that professionals warn is heightening overall risk. This suggests that businesses have not only been slow to hire new talent, but they’ve also underinvested in upskilling existing employees, leaving them vulnerable to cyber threats.

Regional Fluctuations and the Skills Deficit

The shortage of cybersecurity professionals is not uniform across the globe. While some regions have seen slight increases in their cybersecurity workforce, others have experienced significant declines.

For instance, the UK’s cybersecurity workforce shrank by 4.9% between 2023 and 2024, with the number of professionals dropping from 367,300 to 349,360. This drop reflects a broader trend in Europe, where access to cybersecurity talent is becoming increasingly scarce. Beyond the lack of workers, there is also a critical gap in cybersecurity skills. According to ISC2’s research, 90% of respondents believe their organisations are experiencing a skills shortage. More than 60% argue that this lack of skills is an even bigger issue than the absence of workers. This skills gap is exacerbated by a mismatch between the skills organisations need and the skills professionals are prioritising. For instance, hiring managers are primarily seeking problem-solving abilities, while cybersecurity professionals believe communication skills are most in demand.

Impacts on Business and Employee Well-being

The talent shortfall doesn’t just impact organisational security; it also affects the well-being of the cybersecurity workforce. ISC2’s study shows that job satisfaction has decreased by 4% over the past year, with many workers citing increased workloads as the cause. Almost 60% of cybersecurity professionals believe that their firms are at higher risk of cyber incidents due to staffing shortages. As threats become more sophisticated—fueled by advancements in AI and machine learning—the need for skilled professionals becomes more urgent.

Solutions to Bridge the Gap

To address these issues, continued investment in skills development for cybersecurity professionals at all levels, greater transparency around job expectations, and a concerted effort to attract new talent to the industry. By lowering barriers to entry and fostering ongoing training, businesses can help close the workforce and skills gaps that currently plague the sector. In this era of growing cyber threats, a robust and well-trained cybersecurity workforce is critical to securing the digital world. The global community must act swiftly to address this shortage before the consequences become irreparable.

In need of cybersecurity support? Reach out to the Certes team to see how our range of solutions can be tailored to support your organisation.