Members of the European Union have a collective lack of cybersecurity skills that can be partially addressed by the increase in new graduates - but even this potential solution has problems.
Supply chain executives are affecting all industries right now, but a supply chain problem that preceded the pandemic is the mismatch between supply and demand for cybersecurity personnel.
ENISA, the EU's transnational cybersecurity body, referred to the continuing supply and demand problem in the labor market and said it would only be resolved by doubling the number of cybersecurity graduates over the next two years.
Free market competition for security professionals also affects the provision of expertise in the public sector and central banks, which do not pay as much as banks and insurance companies.
ENISA separates the terms cybersecurity "skills gap" and "skills shortage" in a new report that explores how to solve the problem. The first term refers to the lack of appropriate skills in the workforce to perform cybersecurity tasks in a professional environment.
The second term refers to "vacancies or unfilled vacancies that have arisen as a result of the lack of qualifications of candidates for positions".
ENISA says there are 126 higher education programs in 25 countries that meet the EU definition of a cybersecurity program. For example, a master's degree requires at least 40% of the courses taught to be cybersecurity. Based on this definition, the postgraduate level qualifications constitute 77% of the ENISA CyberHEAD Higher Education Database (CyberHEAD).
Distance education became the norm during the pandemic, but ENISA found that only 14% of higher education cybersecurity programs are online only, while 57% are only in the classroom and 29% are a combination of face-to-face courses. -face and online learning.
Language is another obstacle. Of the EU programs included in the database, there were 16 languages, with 38% being taught in English, 17% in Spanish, 11% in German, 7% in Italian, 5% in French, 4 % in Greek and 4% in Portuguese.
ENISA argues that "a percentage of English-based programs offer additional benefits" by producing graduates who are confident of interacting in an international environment.
University tuition is another barrier to entry. About 71% of cybersecurity programs required fees to register.
Regarding the placement of new graduates in the private and public sectors, ENISA found that compulsory internships were only part of 34% of EU programs. Only 23% of the programs prepared students for specific vocational certifications, such as CISSP, ISO 27001 and CompTIA Security +.
In terms of gender, women accounted for at least 20% of cybersecurity programs in only six EU countries: Romania (50%), Latvia (47%), Bulgaria (42%), Lithuania (31%), France ( 20%) and Sweden (20%).
Source of information: zdnet.com