Nearly half of cyber security experts will change jobs by 2025
Source: Middle East Insurance Review | Apr 2023
A new report by Gartner predicts that by 2025 nearly half of cyber security experts will change jobs while 25% of these cyber security leaders will pursue different roles entirely due to workplace stress.
Gartner said cyber security professionals are facing unsustainable levels of stress. CISOs are on the defense, with the only possible outcomes that they don’t get hacked or they do. The psychological impact of this directly affects decision quality and the performance of cyber security leaders and their teams.
Given these dynamics as well as the massive market opportunities for cyber security professionals, talent churn poses a significant threat for security teams. Gartner research showed that compliance-centric cyber security programmes, low executive support and subpar industry-level maturity are all indicators of an organisation that does not view security risk management as critical to business success.
Organisations of this type are likely to experience higher attrition as talent leaves for roles where their impact is felt and valued.
Gartner predicts that by 2025, lack of talent or human failure will be responsible for over half of significant cyber incidents. The number of cyber and social engineering attacks against people is spiking as threat actors increasingly see humans as the most vulnerable point of exploitation.
A Gartner survey conducted in 2022 among 1,310 employees revealed that 69% of employees have bypassed their organisation’s cyber security guidance in the past 12 months. In the survey, 74% of employees said they would be willing to bypass cyber security guidance if it helped them or their team achieve a business objective.
To confront this rising threat, Gartner predicts that half of medium to large enterprises will adopt formal programmes to manage insider risk by 2025, up from 10% today. A focused insider risk management programme should proactively and predictively identify behaviours that may result in the potential exfiltration of corporate assets or other damaging actions and provide corrective guidance, not punishment. M