cybersecurity skills gap (noun) [Word Notes]

Summary

Podcast Summary: "Cybersecurity Skills Gap"
"Hacking Humans" by N2K Networks
Release Date: February 18, 2025

---

Introduction

In the February 18, 2025 episode of "Hacking Humans," hosted by N2K Networks, the focus centers on the persistent and evolving cybersecurity skills gap. This episode delves deep into the challenges organizations face in securing their digital assets, the current state of the workforce, and innovative solutions aimed at bridging this critical gap.

---

Understanding the Cybersecurity Skills Gap

Rick Howard opens the discussion by defining the "cybersecurity skills gap" as the disparity between the cybersecurity expertise that employers require and the existing pool of qualified candidates. He emphasizes, “[...] the skills gap for the difference between what employers need versus the existing pool of potential employees” (00:58). Rick elaborates on the significance of this gap, citing data from the International Information System Security Certification Consortium (ISC)², which reported over 3 million unfilled cybersecurity positions worldwide as of November 2020—though this number has decreased from previous years.

---

Diversity in the Cybersecurity Workforce

A notable positive trend highlighted by Rick is the improvement in workforce diversity within the cybersecurity field. He states, “Women represent 24% of the workforce and minorities 26%. Just five years ago those numbers were in the low teens, and if you looked at women minorities specifically, those numbers were in the single digits” (00:58). This progress surpasses national employment averages, showcasing a growing inclusivity that enriches the field with diverse perspectives and talents.

---

Impact of the Pandemic on Hiring

Despite the encouraging strides in diversity, Rick points out a concerning downturn in the cybersecurity skills gap, attributing it partly to the COVID-19 pandemic. “The bad news is this recent downtick in the skills gap might be associated with the pandemic when most organizations just froze in place in terms of hiring” (00:58). The U.S. Bureau of Labor Statistics projects a 32% growth in employment for information security analysts by 2028, potentially expanding the skills gap back to 4 million positions.

---

Projections and Long-Term Solutions

Addressing the sustainability of workforce growth, Rick reflects on previous assumptions about closing the skills gap solely through increasing diversity among women and minorities. He acknowledges, “At 1.5 years ago, some pundits, including me, thought we could close the gap by just hiring more qualified minorities and women” (00:58). However, he now recognizes the necessity for a more comprehensive approach: building a qualified cybersecurity workforce from the ground up. This entails fostering interest and skills in cybersecurity from elementary school onward, ensuring sustained engagement and education across all demographics.

---

Educational Initiatives and Early Training

Emphasizing the importance of early education, Rick highlights successful pilot projects, notably the Girl Scouts Cyberbadge program. He notes, “We've had some success with small pilot projects like the Girl Scouts Cyberbadge program” (00:58). This initiative aims to instill foundational cybersecurity skills in young girls, setting the stage for a robust future workforce.

---

Interview with Sylvia Acevedo: Championing Cyber Education

The episode features an insightful conversation with Sylvia Acevedo, CEO of the Girl Scouts, who provides firsthand insights into the Cyberbadge program.

Becky, the co-host, introduces Sylvia, stating, “And joining us to talk about it is Sylvia Acevedo. She's the Girl Scout CEO” (04:39). Sylvia shares her enthusiasm, saying, “the girls love cybersecurity. The girls told us they wanted it” (05:06). She clarifies that the initiative was driven by the girls' desire to be safe online: “No, they didn't say cybersecurity. They said, we live digital lives and we want to be safe online” (05:12).

Sylvia elaborates on the program's success, highlighting impressive adoption rates: “84,000 badges have been earned. Almost 10,000 cybersecurity badges a month are earned” (05:12). She illustrates the program's impact on families, mentioning how parents are adopting better cybersecurity practices at home thanks to their daughters' new knowledge: “...parents have reached out to me on social media and they say, you know, my daughter comes home and says, mom and dad, what's our protocol for the wi fi passwords? And when's the last time that we cleaned out our browsers and our cache?” (05:38).

Sylvia also discusses the broader scope of their STEM initiatives: “We also introduced so many STEM badges. Coding for Good, for example. So girls are learning. Yes. About coding, app development, game development. And what's great is that we start at age 5, but go all the way to age 18” (05:40). This comprehensive approach ensures that girls receive continuous STEM education throughout their formative years.

---

Scaling Educational Programs to Bridge the Skills Gap

Rick underscores Sylvia’s points by advocating for the widespread implementation of such educational programs: “In order to fill the gap, though, the community needs to scale this kind of effort across the board or we will have no hope of ever reducing the size of the problem” (00:58). He stresses that incremental successes from pilot projects must be expanded to create a substantial and lasting impact on the cybersecurity workforce.

---

Conclusion

The episode "Cybersecurity Skills Gap" sheds light on the multifaceted challenges in the cybersecurity landscape, particularly the significant gap between industry demand and the available skilled workforce. While progress has been made in diversifying the workforce, the impending growth in cybersecurity roles necessitates a strategic and long-term commitment to education and training. Initiatives like the Girl Scouts Cyberbadge program exemplify effective strategies to cultivate interest and skills from a young age, paving the way for a resilient and capable cybersecurity workforce. As Rick and Sylvia illustrate, scaling these efforts is crucial to ensuring that the industry can meet its future demands and safeguard our digital world.

---

Notable Quotes:

• Rick Howard (00:58): “The difference between organizational employee job requirements and the available skill sets in the potential employee pool.”

• Sylvia Acevedo (05:06): “The girls love cybersecurity. The girls told us they wanted it.”

• Sylvia Acevedo (05:38): “Parents have reached out to me on social media and they say, you know, my daughter comes home and says, mom and dad, what's our protocol for the wi fi passwords?”

---

Credits:
Wordnotes by Nyla Genoi, executive produced by Peter Kilpe, edited by John Pettrick and Rick Howard. Original music and sound design by Elliot Peltzman.

Transcript

[Becky]

You're listening to the Cyberwire Network powered by N2K.

[N/A]

Your business needs AI solutions that are not only ambitious, but also practical and adaptable. That's where Domo's AI and data products platform comes in. With Domo, you can channel AI and data into innovative uses that deliver measurable impact. Secure AI agents connect, prepare and automate your data workflows, helping you gain insights, receive alerts, and act with ease through guided apps tailored to your role. Data is hard. Domo is easy. Learn [e-mail] that's AI.domo.com.

[Rick Howard]

The word is Cyber Cybersecurity Skills gap spelled cybersecurity for the art and science of protecting people, networks, devices and data from theft, espionage, hacktivism and continuous low level cyber conflict and skills gap for the difference between what employers need versus the existing pool of potential employees the difference between organizational employee job requirements and the available skill sets in the potential employee pool. Example Sentence A holistic approach to cybersecurity education would contribute toward bridging the cybersecurity skills gap. Origin and context as of November 2020, according to the International Information System Security certification consortium, or ISC, squared, just over 3 million cybersecurity positions are unfilled worldwide. The good news is that number is down from just over 4 million in previous years. There is also good news on the diversity front. Women represent 24% of the workforce and minorities 26%. Just five years ago those numbers were in the low teens, and if you looked at women minorities specifically, those numbers were in the single digits. We are making progress and these current percentages are well ahead of the national employment average. The bad news is this recent downtick in the skills gap might be associated with the pandemic when most organizations just froze in place in terms of hiring. The U.S. bureau of labor and Statistics projects that employment for information security analysts will grow at 32% between now in 2028, which would put the skills gap right back at 4 million. At 1.5 years ago, some pundits, including me, thought we could close the gap by just hiring more qualified minorities and women. While improving those percentages is a good idea in terms of a diverse workforce, the community may have hit an upper limit with the number of skilled employees available from those pools. The solution then is a long term commitment to building a qualified workforce from the ground up, starting with elementary school. That commitment has to solve the problem of finding a way to keep women and minorities excited about the field throughout their educational experience, but also expanding the training to the entire potential workforce almost exponentially. We've had some success with small pilot projects like the Girl Scouts Cyberbadge program. In 2018, the Girl Scouts CEO Sylvia Acevedo launched the first group of cybersecurity badges for their K12 scouts. In a generation, 2.5 million girl scouts will hit the streets with a strong foundation in cybersecurity. In order to fill the gap, though, the community needs to scale this kind of effort across the board or we will have no hope of ever reducing the size of the problem. Nerd reference In a cnbc interview on August 2, 2019, the on the Money host interviews Sylvia Acevedo about the Girl Scouts cyberbadge program.

[Becky]

Check it out. Me and my brownie uniform from long, long time ago. This year, the organization is introducing 42 new badges covering areas like cybersecurity, coding, and the outdoors. And joining us to talk about it is Sylvia Acevedo. She's the Girl Scout CEO. And Sylvia, it's great to see you.

[Sylvia Acevedo]

Hey, thanks for having me here.

[Becky]

Becky, thanks for coming in. Lots of new badges that you've introduced, which is very exciting as a former Girl Scout, but these are different types of badges and I'm thinking specifically of this one right here.

[Sylvia Acevedo]

Yes, cybersecurity, right? You know, the girls love cybersecurity. The girls told us they wanted it.

[Becky]

It wasn't your idea they came here?

[Sylvia Acevedo]

No, they didn't say cybersecurity. They said, we live digital lives and we want to be safe online. And let me tell you, the adoption rate has been phenomenal. Our Girls badges from 5 to 10 year old. Do you know, in the first few months, 84,000. 84,000 badges have been earned. Almost 10,000 cybersecurity badges a month are earned.

[Becky]

Wow.

[Sylvia Acevedo]

Across the country, what do you have.

[Becky]

To do to get your cybersecurity?

[Sylvia Acevedo]

So what's so fun is after the girls have earned their badges, their parents have reached out to me on social media and they say, you know, my daughter comes home and says, mom and dad, what's our protocol for the wi fi passwords? And when's the last time that we cleaned out our browsers and our cache? You know, they're learning things that are so relevant to the world today. But it's not just our cybersecurity. We also introduced so many STEM badges. Coding for Good, for example. So girls are learning. Yes. About coding, app development, game development. And what's great is that we start at age 5, but go all the way to age 18.

[Rick Howard]

Wordnotes is written by Nyla Genoi, executive produced by Peter Kilpe and edited by John Pettrick and me, Rick Howard. The mix, sound, design and original music have all been crafted by these ridiculously talented Elliot Peltzman. Thanks for listening.

[N/A]

Cyber threats are evolving every second, and staying ahead is more than just a challenge, It's a necessity. That's why we're thrilled to partner with ThreatLocker, the cybersecurity solution trusted by businesses worldwide. ThreatLocker is a full suite of solutions designed to give you total control, stopping unauthorized applications, securing sensitive data, and ensuring your organization runs smoothly and securely. Visit threatlocker.com today to see how a default deny approach can keep your company safe and compliant.