Chapter 65. The Dirty Truth Behind Breaking into Cybersecurity
Naomi Buckwalter
We are understaffed, overworked, and stressed in cybersecurity.
If you’ve ever spent any amount of time in cybersecurity, whether it’s two weeks or two decades, you probably understand that statement to be true. In a 2019 survey by Nominet, 91% of CISOs say they suffer from moderate or high stress, and 65% of SOC professionals say stress has caused them to think about quitting.1
But why are we stressed? It’s quite simple. We have too much to do and not enough people to do it.
Not only that, but it is due to this shortage that we are also at an increased risk of data breaches and cybercrime. According to a 2018 study by (ISC)2, over 60% of global organizations said they are at moderate or extreme risk of cyberattack due to this shortage.2 And according to a 2019 report by the IC3 and the FBI, over 1,300 cybercrimes were reported every day. US businesses lost a total of 3.5 billion dollars that year alone.3
The cybersecurity talent pipeline—the source of incoming entry-level cybersecurity professionals—is unsustainably small. Many cybersecurity hopefuls looking to start a career in cybersecurity are being turned away at the door for not having enough experience. Indeed, the average “entry-level” job in cybersecurity requires five years of experience, a CISSP, and a college degree.
This doesn’t make any ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access