The Security Resource Pinch

The Security Resource Pinch

Our CEO has spent the weekend talking to US, UK, Canadian, Irish, and Swedish representatives about the shortage of security resources and the democratic, social, and economic implications of said shortage. I must say, the idea that the world is short of capable security staff isn’t new, you just have to look at the plethora of open roles across all industries. What is new though, is the intricacies of current threats and the increase in legislative accountability that has changed due to recent breaches. As everyone is tightening their risk belts and trying to prepare for the big threat storm that seems to be gaining momentum, it has left the market capably short.


This problem will not fix itself. In response to the shortage, universities have created new degrees in the subject, governments are investing in competency, and companies are providing support for current employees to skill up. These efforts will only be valuable after the 3-5 years of study and experience. What do we do until then?


Just like we saw in the industrial and technological ages, we have to adapt to what this new landscape is presenting to us. In both of these periods, the introduction of new technology assisted in expanding current capabilities and aligned the graphs for production capacity vs demand. The people wanted more widgets and producers responded by increasing capacity by designing tools to improve the quality and throughput of widgets. We as an industry must do the same in this situation. We?MUST?reduce our dependency on people and use our skilled workforce for the tasks that computers and algorithms can’t do.


At Compyl, we saw this early. With most of our team being cyber and risk experts, the pain of completing menial tasks by qualified staff just destroys the morale, it also depletes employee retention statistics. Automation in security and compliance doesn’t just compensate for the staffing issues that all are facing at the moment but reduces the likelihood of errors being caused in these menial tasks. It also allows you to retain and re-train your security staff for important tasks like discovery, testing, and incident response activities. This, in turn, assists in retention issues you have had in the past.


If you find yourself in this position, with a less-than-desired staffing level, money crunching to afford top talent, or just want to accelerate your security and risk maturity, come speak with us at Compyl. We have proven and secure ways to reduce your security workload and supercharge your security program’s maturity in preparation for the storm very much on its way.

Find out more at: www.compyl.com

#riskmanagement #securitymanagement #soc2 #iso27001 #staffshortages #nist #cybersecurity #grc

要查看或添加评论,请登录

社区洞察

其他会员也浏览了