The US-based membership body for cybersecurity professionals ISC2 has released the 2024 Cybersecurity Workforce Study. The report finds that, despite the growing need for cyber people, global workforce growth has slowed for the first time since ISC2 began estimating the workforce size six years ago, holding at 5.5 million people (a 0.1 per cent year-on-year increase). This contrasts with last year when the workforce grew 8.7pc year-on-year despite declining economic conditions.
Cyber people are feeling the impact of declining investments in the cybersecurity workforce, including budget cuts and layoffs, affecting workforce satisfaction, the development of organizational security and the adoption of new technologies. For the first time, those taking part in the survey cited “lack of budget” as the top cause of their staffing shortages, replacing “lack of qualified talent” as the top cause the previous year. Most, 74 per cent of respondents say the threat landscape is the most challenging they have experienced in the last five years, and job satisfaction has fallen from 74pc in 2022 to 66pc in 2024.
Meanwhile, about two-thirds, 67pc of respondents indicated they had a staffing shortage this year, while 90pc reported skills gaps on their cyber teams. More than half of those surveyed (58pc) believe a shortage of skills puts their organisation at significant risk, and over one-third of respondents cited AI as the biggest skills shortfall on their teams. Those surveyed believe that AI and automation will have the most significant impact on their ability to secure their organisation.
The study also measured perspectives on opportunities for growth. Study participants are optimistic about AI adoption and are focused on attaining the skills they need to be successful in an AI-driven workplace. Most, 66pc of study participants say AI represents career growth opportunities, while another majority (54pc) says it will be helpful to their security operations. Half, 51pc believes AI will result in certain cyber skills becoming obsolete, but two-thirds are confident their expertise will complement the technology. Some 80pc say that their cybersecurity skill set will be more important in an AI-driven world.
ISC2 Acting CEO and CFO Debra Taylor said: “As economic conditions continue to impact workforce investment, this year’s Cybersecurity Workforce Study underscores that many organizations are putting their cyber teams under significant strain, risking burnout and attrition as job satisfaction rates fall. Despite these challenges, AI is viewed by professionals as a solution to strengthen their organizations’ security and create new efficiencies for their teams. They also view effectively managing risk associated with AI adoption and its strategic importance to their organization’s future success as career growth opportunities for themselves and their peers. Organizations and cybersecurity leaders must recognize how AI can contribute to creating more resilient security teams, especially while economic challenges persist.”
Some 45pc of respondents’ teams are already using AI in cybersecurity tools, first for augmenting common operational tasks (56pc), then speeding up report writing and incident reporting (49pc), simplifying threat intelligence (47pc) and accelerating threat hunting (43pc).
Other findings include:
– Nearly 90 per cent of professionals said their organization has a Gen AI use policy, but 65pc say their organization needs more regulations on the safe use of Gen AI;
– Some 60 per cent respondents reported that their cyber team is involved with creating regulations and guidelines for Gen AI;
– Lack of a clear Gen AI strategy was cited as one of the top barriers to its adoption by nearly half (45pc) of all participants; and
– Once AI strategies are enhanced, 68pc agree within the next two years, they will be able to use Gen AI effectively as part of their roles.
