Intelligent CISO Issue 28 | Page 29

R? MATT LOCK, TECHNICAL DIRECTOR UK, VARONIS eports say there will be over 3 million unfilled security positions by next year. It’s going to be an ongoing issue, but COVID will squeeze many companies and add to the challenge. According to Cybersecurity Ventures, a total of 3.5 million cybersecurity jobs will be available but unfilled by 2021. Executives and boards looking to reduce their expenses should think carefully before cutting security staff or eliminating open positions. Companies should also widen their approach to recruiting by considering candidates who have not attended university – cybersecurity is a dynamic field and those hiring should prioritise experience and certifications. Many business leaders do not understand that their IT and security staff are underutilised. If IT spend their time resetting passwords and assigning access to group resources, and if security staff are buried in alerts, it’s only a matter of time before a compromise occurs. Organisations should reduce the burden on IT by Automation and Machine Learning are picking up the slack by helping companies bridge the human talent gap and defend critical assets. editor’s question Companies should also widen their approach to recruiting by considering candidates who have not attended university. helping end-users help themselves with self-service tools, and they should help security staff by ensuring their defences are tightly integrated to help staff quickly identify and elevate only the most likely security violations. Automation and Machine Learning are picking up the slack by helping companies bridge the human talent gap and defend critical assets. If you’re still relying on staffers to watch monitors 24/7, you’re already behind. Not only is it ineffective and a waste of your qualified staff, it does not guarantee that you will spot and stop an attack before damage is done. Attackers are opportunists and sophisticated ones will take their time and launch an attack when it’s least expected. If a ransomware attack hits your network on a bank holiday or a Friday evening, technology will be your first line of defence. www.intelligentciso.com | Issue 28 29