The Cybersecurity Crisis: A Self-Inflicted Wound

In a world increasingly dependent on digital infrastructure, the biggest security threat to the North American economy isn’t some shadowy hacker collective or a state-sponsored cyberwarfare unit. It’s a much more mundane—and fixable—problem: the glaring shortage of trained, affordable, and available cybersecurity professionals. This scarcity isn’t just a minor inconvenience; it’s a ticking time bomb that could cripple economies, disrupt lives, and compromise national security.

The Decline of Computer Science Graduates

Let's talk numbers. Over the past decade, the number of graduates in computer science and related fields has stagnated, even as the demand for these skills has skyrocketed. Universities are churning out fewer graduates in critical tech disciplines, creating a widening chasm between supply and demand. According to the National Center for Education Statistics, the percentage of students earning degrees in computer science has not kept pace with the explosive growth of the tech industry. This isn’t just an academic issue; it’s a clear and present danger to our economic stability.

Barriers to Entry: The Pedigree Problem

We’ve created an absurd barrier to entry in a field that should value practical experience over academic pedigree. The current system disproportionately favors those with the means and opportunity to attend prestigious universities, sidelining a vast pool of talented individuals who could excel in cybersecurity roles with the right training and support. This elitist approach ignores the reality that cybersecurity is as much an art as a science, requiring hands-on skills and real-world problem-solving abilities that aren’t always taught in classrooms.

The Automation Silver Bullet?

Enter technology vendors with their shiny, automated solutions promising to bridge the skills gap. Every major player in the tech industry is pushing automation tools designed to mitigate the shortage of skilled cybersecurity professionals. While automation can undoubtedly help, it’s not a panacea. Automated systems can handle routine tasks, but they can’t replace the nuanced understanding and critical thinking of a well-trained human professional. The risk is that we become overly reliant on these tools, creating a false sense of security and failing to address the underlying issue.

The Path Forward

So, what’s the solution? It’s time to rethink how we train and credential cybersecurity professionals. We need to democratize access to education and create alternative pathways into the field. This means investing in vocational training, apprenticeships, and on-the-job learning opportunities that focus on practical skills rather than theoretical knowledge. Companies should prioritize experience and aptitude over formal degrees, recognizing that the best cybersecurity experts might not come from traditional educational backgrounds.

Moreover, we need a coordinated effort between the private sector, educational institutions, and government agencies to create a robust pipeline of cybersecurity talent. Scholarships, grants, and subsidies can help lower the financial barriers, while public-private partnerships can provide the necessary training and experience.

Conclusion

The shortage of cybersecurity professionals is a self-inflicted wound, born out of an outdated and elitist approach to education and credentialing. By valuing experience over pedigree and investing in practical training, we can build a resilient and capable cybersecurity workforce. The stakes couldn’t be higher. It’s time to act before the next big cyberattack forces us to reckon with the consequences of our inaction.

Stay safe, stay savvy, and let’s fix this mess before it’s too late.

Jon Garside