Podcast Summary: "Cybersecurity Skills Gap"
"Hacking Humans" by N2K Networks
Release Date: February 18, 2025

Introduction

In the February 18, 2025 episode of "Hacking Humans," hosted by N2K Networks, the focus centers on the persistent and evolving cybersecurity skills gap. This episode delves deep into the challenges organizations face in securing their digital assets, the current state of the workforce, and innovative solutions aimed at bridging this critical gap.

Understanding the Cybersecurity Skills Gap

Rick Howard opens the discussion by defining the "cybersecurity skills gap" as the disparity between the cybersecurity expertise that employers require and the existing pool of qualified candidates. He emphasizes, “[...] the skills gap for the difference between what employers need versus the existing pool of potential employees” (00:58). Rick elaborates on the significance of this gap, citing data from the International Information System Security Certification Consortium (ISC)², which reported over 3 million unfilled cybersecurity positions worldwide as of November 2020—though this number has decreased from previous years.

Diversity in the Cybersecurity Workforce

A notable positive trend highlighted by Rick is the improvement in workforce diversity within the cybersecurity field. He states, “Women represent 24% of the workforce and minorities 26%. Just five years ago those numbers were in the low teens, and if you looked at women minorities specifically, those numbers were in the single digits” (00:58). This progress surpasses national employment averages, showcasing a growing inclusivity that enriches the field with diverse perspectives and talents.

Impact of the Pandemic on Hiring

Despite the encouraging strides in diversity, Rick points out a concerning downturn in the cybersecurity skills gap, attributing it partly to the COVID-19 pandemic. “The bad news is this recent downtick in the skills gap might be associated with the pandemic when most organizations just froze in place in terms of hiring” (00:58). The U.S. Bureau of Labor Statistics projects a 32% growth in employment for information security analysts by 2028, potentially expanding the skills gap back to 4 million positions.

Projections and Long-Term Solutions

Addressing the sustainability of workforce growth, Rick reflects on previous assumptions about closing the skills gap solely through increasing diversity among women and minorities. He acknowledges, “At 1.5 years ago, some pundits, including me, thought we could close the gap by just hiring more qualified minorities and women” (00:58). However, he now recognizes the necessity for a more comprehensive approach: building a qualified cybersecurity workforce from the ground up. This entails fostering interest and skills in cybersecurity from elementary school onward, ensuring sustained engagement and education across all demographics.

Educational Initiatives and Early Training

Emphasizing the importance of early education, Rick highlights successful pilot projects, notably the Girl Scouts Cyberbadge program. He notes, “We've had some success with small pilot projects like the Girl Scouts Cyberbadge program” (00:58). This initiative aims to instill foundational cybersecurity skills in young girls, setting the stage for a robust future workforce.

Interview with Sylvia Acevedo: Championing Cyber Education

The episode features an insightful conversation with Sylvia Acevedo, CEO of the Girl Scouts, who provides firsthand insights into the Cyberbadge program.

Becky, the co-host, introduces Sylvia, stating, “And joining us to talk about it is Sylvia Acevedo. She's the Girl Scout CEO” (04:39). Sylvia shares her enthusiasm, saying, “the girls love cybersecurity. The girls told us they wanted it” (05:06). She clarifies that the initiative was driven by the girls' desire to be safe online: “No, they didn't say cybersecurity. They said, we live digital lives and we want to be safe online” (05:12).

Sylvia elaborates on the program's success, highlighting impressive adoption rates: “84,000 badges have been earned. Almost 10,000 cybersecurity badges a month are earned” (05:12). She illustrates the program's impact on families, mentioning how parents are adopting better cybersecurity practices at home thanks to their daughters' new knowledge: “...parents have reached out to me on social media and they say, you know, my daughter comes home and says, mom and dad, what's our protocol for the wi fi passwords? And when's the last time that we cleaned out our browsers and our cache?” (05:38).

Sylvia also discusses the broader scope of their STEM initiatives: “We also introduced so many STEM badges. Coding for Good, for example. So girls are learning. Yes. About coding, app development, game development. And what's great is that we start at age 5, but go all the way to age 18” (05:40). This comprehensive approach ensures that girls receive continuous STEM education throughout their formative years.

Scaling Educational Programs to Bridge the Skills Gap

Rick underscores Sylvia’s points by advocating for the widespread implementation of such educational programs: “In order to fill the gap, though, the community needs to scale this kind of effort across the board or we will have no hope of ever reducing the size of the problem” (00:58). He stresses that incremental successes from pilot projects must be expanded to create a substantial and lasting impact on the cybersecurity workforce.

Conclusion

The episode "Cybersecurity Skills Gap" sheds light on the multifaceted challenges in the cybersecurity landscape, particularly the significant gap between industry demand and the available skilled workforce. While progress has been made in diversifying the workforce, the impending growth in cybersecurity roles necessitates a strategic and long-term commitment to education and training. Initiatives like the Girl Scouts Cyberbadge program exemplify effective strategies to cultivate interest and skills from a young age, paving the way for a resilient and capable cybersecurity workforce. As Rick and Sylvia illustrate, scaling these efforts is crucial to ensuring that the industry can meet its future demands and safeguard our digital world.

Notable Quotes:

• Rick Howard (00:58): “The difference between organizational employee job requirements and the available skill sets in the potential employee pool.”

• Sylvia Acevedo (05:06): “The girls love cybersecurity. The girls told us they wanted it.”

• Sylvia Acevedo (05:38): “Parents have reached out to me on social media and they say, you know, my daughter comes home and says, mom and dad, what's our protocol for the wi fi passwords?”

Credits:
Wordnotes by Nyla Genoi, executive produced by Peter Kilpe, edited by John Pettrick and Rick Howard. Original music and sound design by Elliot Peltzman.