As technology continues to evolve, it brings immense benefits, from streamlining tasks to enabling new ways of connecting, working, and learning. However, alongside these advancements comes increased cybersecurity risk. As software grows more sophisticated, so do the tools and skills of cybercriminals. Recently, the rise of artificial intelligence (AI) technologies like ChatGPT and Bard has amazed millions, but it has also coincided with a 38% increase in global cyberattacks. The cost of cybercrime is staggering, with an estimated $8 trillion in losses this year alone, a figure set to surpass $10 trillion by 2025.

Rethinking Qualifications and Hiring Models

With cybercrime on the rise, the gap between the growing demand for cybersecurity talent and the supply of qualified professionals is widening. According to Cengage Group’s 2022 employability report, 57% of tech employers are unlikely to consider candidates without an industry-specific bachelor’s degree. Yet, even those with a cybersecurity degree face challenges, as many entry-level roles demand 3-5 years of experience. This illustrates a fundamental misunderstanding about the true qualifications needed to succeed in cybersecurity.

The demand for senior cybersecurity talent is far greater than in many other industries, which requires a shift in hiring practices. IT leaders must rethink how they define “qualified” candidates. Rather than focusing on degrees, a skills-based approach to hiring is necessary. Employers should prioritize core competencies and verify skills through practical tests, then offer training to fill any gaps. Additionally, companies must take a more active role in developing entry-level talent, from recruitment to ongoing skill development. Partnering with local colleges, workforce organizations, and outside intermediaries can provide cost-effective ways to recruit and train talent, ensuring a steady pipeline of skilled workers.

The Apprenticeship Advantage

To address the cybersecurity talent shortage, the Biden administration launched a 120-day cybersecurity apprenticeship program in 2022, placing 7,000 apprentices into full-time roles at companies like IBM, McDonald’s, and Boeing. Apprenticeships offer a unique opportunity for both employers and employees. Employers can evaluate a potential hire in real-time while providing essential training, reducing the hiring risk. For employees, apprenticeships allow them to “learn while they earn,” gaining both practical skills and valuable experience in a short time-frame. These programs are a proven model for quickly producing job-ready talent.

However, apprenticeships should only be the beginning. Continuous upskilling is equally vital.

The Need for Continuous Upskilling

As cyber threats evolve, so must the skill sets of cybersecurity professionals. Ongoing training and development are critical to maintaining a strong defense against increasingly sophisticated cybercriminals. Cengage Group’s research on The Great Resignation revealed that a significant factor in employees’ decisions to leave their jobs was a lack of career growth opportunities. Conversely, 66% of those who left said access to employer-paid upskilling played a key role in their decision to take a new job. IT leaders must demonstrate a commitment to upskilling their cybersecurity teams if they want to retain top talent. This may require closer collaboration with HR departments and external partners who can assist in providing ongoing training and development.

A New Approach to Cybersecurity Talent

Cybercrime will always be a threat, and cybercriminals will continue to adapt. But by reimagining talent acquisition, embracing a skills-based hiring model, offering apprenticeships, and committing to continuous upskilling, organizations can build stronger, more resilient cybersecurity teams. By ensuring the workforce is well-trained and continuously developing, businesses can mount a more formidable defense against evolving cyber threats.

As we benefit from technology, we must also recognize and mitigate the risks it introduces. Strengthening the cybersecurity workforce is crucial to safeguarding our digital future.