New research from ISACA has revealed that the majority (87%) of IT professionals agree that there is a lack of gender diversity in the cybersecurity sector, yet less than half (41%) of businesses have programmes in place to hire more women. Whilst troublesome, these stats are not necessarily surprising. What’s more, 74% of businesses noted that attracting and retaining talent is a challenge.

The research by ISACA formed its latest Tech Workplace and Culture report, which surveyed 7,726 tech professionals around the globe.

When looking at why women are still underrepresented in tech roles, 43% of female respondents (and 21% of men) said that it is because most IT role models and leaders are male. The next biggest culprit was pay inequality, according to 42% of women—but only 15% of men—who responded.

Overall, men tend to rate their sense of authority in specific areas of their current role more highly, whereas women tend to give lower ratings. The gap between men and women’s perceptions of authority are the largest for making purchasing decisions (13 percentage point gap) and contributing to the company strategy and direction (10 percentage point gap).

“More needs to be done to increase the representation of women in the IT and technology sector—and more needs to be done to welcome their leadership and influence,” says Julia Kanouse, who serves as Chief Membership Officer at ISACA and oversees the association’s SheLeadsTech program. “This will not only help to address the global skills gap and boost productivity in the sector—it will also create a more inclusive and diverse working environment.”

Survey respondents believe educational institutions can significantly enhance gender inclusion by providing mentors or role models (cited by 52% of respondents). Additionally, establishing tech clubs and/or organisations for women to network (42%) and hiring more female tech professors (31%) are seen as crucial steps towards greater gender inclusivity in the educational sphere.

68 percent of women and 72 percent of men indicate they are extremely or very satisfied with their career progression. Additionally, 73 percent of women and 71 percent of men say they have received a salary increase and/or promotion in the last two years.

Sarah Orton, UK and Europe lead for ISACA’s SheLeadsTech initiative, said: “Encouragingly, women have near-equal career progression satisfaction to their male counterparts and are slightly more likely to have received a raise or a promotion in the last two years. Having a workforce of people with different backgrounds, experiences, and perspectives to bring to the table is not only the right thing to do – it’s also a business imperative that makes an organization more innovative and it’s work that much more efficient and effective. Progress has been made – but the sector has more work to do, and ISACA is supporting this important work.”

The post Only 41% of Businesses Have Programs in Place to Hire More Women in Tech appeared first on IT Security Guru.

Community is exceptionally important to the team at the IT Security Guru. We believe that building community and supporting one another is where our industry thrives, that’s why we’re platforming charities, initiatives and networks that work within the industry, as well as the wider community.

One great example of this is the InClusive InCyber initiative run by the team at LT Harper, headed up by Aymun Lashari, the cyber recruitment organisation’s Head of Community.

What is InClusive InCyber’s mission?

InClusive InCyber aims to create a safe, empowering space for women in cybersecurity to connect, share knowledge, and support each other’s growth in a traditionally male-dominated industry. Our mission is to foster inclusivity, promote diversity, and build resilient networks that enhance professional development while advocating for gender equity in cybersecurity.

How did you get started? Where did the idea come from?

The idea for ICIC came from really listening to our clients and candidates at LT Harper, about their experiences of feeling underrepresented in cybersecurity spaces. We recognised the need for a close-knit, supportive community where women could share their challenges and successes, we initially started off with a group of 10 women, and now our latest event in London had over 100 participants! Just by starting small, intimate breakfast gatherings, we created a platform for candid conversations and deep connections.

Why are communities like yours so important for the industry?

Communities like ICIC are incredibly essential. We provide women with the support, resources, and networking opportunities they need to thrive in an industry where they are often misunderstood. The breakfasts also offer a platform for raising awareness about the challenges women face and the value they bring to cybersecurity, contributing to a more inclusive and innovative workforce.

What do you hope that the future of the industry looks like?

Ideally I would hope to see a cybersecurity industry where diversity is not just an afterthought but a core strength. We’re becoming equal in most markets – so why not tech, and why not cybersecurity? This needs to be an industry where women and other minority groups are equally visible, valued, and given leadership opportunities. The future I envision is one where inclusion drives innovation and resilience.

How can people get involved?

People can get involved by following LT Harper on LinkedIn, as well as joining our women’s group on LI called InClusive InCyber, they can attend our events, or simply engage in conversations around diversity and inclusion in cybersecurity. We welcome allies who are committed to supporting women and other underrepresented groups in the field!!

Anything you want people to know?

My main focus is definitely that I want people to know how allyship is critical in breaking down barriers in cybersecurity. By working together, we can create a more diverse and inclusive industry that is stronger, more innovative, and better equipped to tackle the challenges of tomorrow.

LT Harper will be bringing InClusive InCyber to the International Cyber Expo on the 24th September 2024. The breakfast morning will feature a panel discussion on risk taking. The event is invitation only and can be registered for here.

The post Community Corner: InClusive InCyber appeared first on IT Security Guru.

Hello, London! 

I’ve always dreamed of saying that and now, thanks to the International Cyber Expo, I’m going to get to say it. I like to think that I’ll be the Liam Gallagher of cyber security panel discussions, except a good deal less shouty and fighty. So, when I think about it, nothing at all like the sharp ticket practice frontman. However, the discussion that I will be chairing will be, to a certain extent, about a dream and how it was initially up in the sky before I was able to bring it on down to reality. I will be discussing with my fellow panellists how we all pursued the dream of one career but then, to use a pentesting term, pivoted into a different career in cyber security.

I myself was a History teacher and, for 25 years, happily taught 1066 and all that to high school pupils. However, as a history buff, I’m fully aware that time moves on, I’m just getting older, it’s easy to get stale and I’m not going to live forever. My once dream job could have started to fade away and become a tortuous Catch-22 of dreading being in a comfort zone where I would soldier on in uninspired familiarity but being too scared to make a break into the unknown. Enter lockdown, where the calendar stood still, the noise of routine daily life ceased and there were weeks, where time would just slide away, in which to stop and reflect. Having spent a good part of my life telling young people that they could do anything or be anything they wanted as long as they dared to dream, it was time for me to put this to the test. 

Computers have always fascinated me. As a teenage boy I had seen the arrival of home computers like the ZX81 and Spectrum and had saved up for four years in order to buy an Amstrad with its own state of the art green screen monitor and built-in cassette player. I had always tried to engage pupils with technology in my lessons and had become a competent user of IT but had always wondered how it worked. During lockdown, I decided to dedicate myself to finding out.

Those first few months involved a lot of head scratching as I watched videos and read books that seemed to make little sense. It was at this point that I took a real leap of faith and signed up to do a part-time MSc in Computer Science with Cybersecurity. Cue two more years of head scratching, hard work and long hours of reading and writing. Much to my surprise (and relief), I got through the course and so was ready to launch the masterplan into my new and exciting career.

My journey led me to becoming a graduate security consultant at Pentest People in Leeds. It’s a great company to work for, partly because they recognise and nurture talent. I’m now their training academy team leader, which combines my old teaching skills with my newfound cyber knowledge. The dream job for me!

So, if you’re considering a mid-life career change, what conclusions can you draw from my tale? Firstly, whatever you think of the risks involved, it’s a life-affirming, re-vitalising experience and, in my mind, helps me to stay young and alive. I like coming to work because, like teaching used to be for me, it doesn’t feel like work.  Secondly, learning new skills is awesome: not easy, but awesome nevertheless. Thirdly, it’s a long journey that isn’t straightforward – think going for a long walk with an uncertain destination but no map (twentysomethings, it’s an early form of satnav) – and it involves a big commitment of time and money, so resilience is important. Some might say that fortune and circumstance have also played their part in getting me where I am.

If you want to hear from me and my co-panellists who will stand by me and discuss, debate and ultimately acquiesce and roll with it about how we chased a dream and changed into a career in cyber security, why not come along to the Cyber International Expo, find out what’s the story and ask for advice? I hope that lots of you, with headfuls of dreams, and keen to find out what’s the story, can make it. That said, if only three of you come, and we’re using dynamic ticketing prices, it will be very cheap to get in.

By Michael Keddie, Training Academy Team Leader – Pentest People

The post It’s Never Too Late: Transitioning to a Career in Cybersecurity appeared first on IT Security Guru.

At this month’s DTX Manchester, I’ll be taking part in a panel discussion around the importance of inclusion and diversity in cyber recruitment.

For far too long cyber security was seen as a man’s sport. Not only did men take up the majority of leadership roles in the industry, but they were the dominant force at all levels, from the SOC to the sales team.

Unsurprising, this earned the industry an image of a boy’s club, which has been difficult to shake, even today.

Fortunately, however, the industry is slowly waking up to the learning that strength lies in differences, not similarities.

To be truly resilient in today’s digital world, organisations benefit from varying perspectives, backgrounds and genders.

Cyber security is all about problem-solving. It was born out of IT, but it’s no longer just a technical nuisance. Today cyber incidents can shatter an organisation’s survival in minutes, while the impacts of attacks can harm customers, employees and physical processes.

As cyber moves away from its roots in IT, organisations are recognising that when recruiting into their security teams, technical qualifications are not the only prerequisite. Instead, they are bolstering their security teams with problem solvers, multi-taskers, born-leaders, each from varying backgrounds, not just previous roles in cyber.

They are also recognising that security teams need to be diverse to achieve cyber resilience. People must come from different backgrounds, genders and races to tackle the continuously evolving cyber challenges they face today.

When organisations do this, they are bolstered with teams who all approach a problem differently. Instead of looking at a problem and seeing only one solution, diverse teams bring numerous unique ideas, which innovates cyber defences and improves the security of a business.

Diverse teams also nurture inclusivity and encourage more people into the cyber profession. Which should, once and for all, eradicate the boy’s club image the industry has been tainted with. As more non-technical people see their peers enter the industry, they will see these people as role models. If they can do it, so can I.

At DTX Manchester, I will be providing organisations with my advice on how to diversify their cyber recruitment strategies.

I will explain how inclusive teams lead to more resilient organisations. Organisations shouldn’t just look at technical qualifications when hiring for cyber roles, the most innovative and resilient organisations are supported by teams with backgrounds in nursing, dancing, taxi driving, and stay-at-home parents. To tackle today’s evolving cyber threats, we need the perspectives of everyone in society, not just a subset.

Cyber criminals don’t operate by the same rule book, the only similarity they share is their desire to cause harm.

If we want to win the fight against them, we must diversify our pool of defenders – where we think differently, tackle problems uniquely and value the skills and opinions of all backgrounds.

Join me at DTX Manchester on Thursday 23rd May, to hear me participate in a session on how to build a resilient cyber workforce, where teams embrace neurodiversity and value different perspectives to help defend against today’s constantly evolving cyber threats.

The post Building a diverse and inclusive cyber workforce first appeared on IT Security Guru.

The post Building a diverse and inclusive cyber workforce appeared first on IT Security Guru.

In today’s business landscape, diverse leadership is essential for driving innovation, improving decision-making, and maintaining a competitive advantage. Historically, STEM sectors have been male-dominated, with strict job descriptions and rigid hiring processes making it difficult for minorities to break into the industry. This has caused many organisations within the industry to have all-male leadership, which can in turn create a culture of bias. This limits innovation and can ultimately hinder their performance in the sector.

Whilst cybersecurity is still male-dominated, we’re starting to see positive changes regarding female representation in leadership positions – with 28% of women currently holding C-suite positions globally. After five years in academia, I transitioned to cybersecurity in 2014 and started in the industry as a personal assistant to Hornetsecurity’s CEO, Daniel Hofmann. In this role I gained valuable insight into business strategy and management, which helped me progress through the company as Head of Product Management and, ultimately, to the position of CTO. My journey at Hornetsecurity has provided me with a wealth of experience, unique opportunities and exposure to different facets of the business which means I’ve learned the essential qualities needed to succeed as CTO.

The qualities of a successful CTO

Regardless of gender, there are three skills any CTO must possess: flexibility, appetite to learn and good communication. In cybersecurity, clients require us to be dynamic, responsive, and knowledgeable on the current and prospective threat landscape, so flexibility is a crucial quality to have as a CTO. The cybersecurity landscape is constantly changing and evolving, and a CTO in this industry must be able to adapt their work in response to developing market conditions and emerging trends. As the industry’s leaders, proactivity is also significant to anticipate and address future challenges such as navigating the growing malicious use of AI or new attack methods.

Having a willingness to learn is also essential. I’ve always been passionate about research and this helps me to lead by example. I consistently wish to establish a culture of learning and development in my organisation to encourage the same passion for knowledge in my teams.

A large part of my role includes liaising with stakeholders and customers, so having a good level of communication is essential. Though we need to have advanced technical knowledge as CTOs, we also need to be able to communicate highly technical subjects in simple, effective ways to help people from all backgrounds align streams of work or a company’s vision.

By prioritising diversity, CTOs can more easily discourage prejudice and create a workplace where often marginalised groups, including women, can thrive. Senior leadership, including CTOs, should strive to encourage employees to follow their passions, regardless of barriers and biases that have historically discouraged them.

The tangible benefits of diverse leadership

Due to the increased need for innovation and creativity in the cybersecurity industry, it’s even more significant to establish a progressive culture. Diverse teams are equipped with varied backgrounds and different experiences which give them the ability to approach challenges from multiple angles. This varied outlook brings a host of benefits to an organisation including greater innovation, creativity and better problem-solving skills. These varied perspectives help us to stay ahead of emerging malicious techniques and inform stakeholders about industry trends and current threats.

Strategies to address diversity challenges in the cybersecurity sector

When people feel seen, empowered, and heard, they tend to be more invested in what they do.  At Hornetsecurity, we provide solutions, but we remember that people create these solutions. In many parts of the world, girls and other minorities are often turned away from science and tech by teachers and parents. Research from The Institution of Engineering and Technology shares that 45% of women aren’t encouraged to think about STEM careers at school, and 32% are put off by how male-dominated the industry is.

Recognising and dealing with biases when female security professionals are applying is imperative. Recruitment shouldn’t hinge on identity, yet without adequate self-awareness, bias can infiltrate HR processes and lead to non-diverse teams who run the risk of ‘groupthink.’ Flexible and inclusive work policies are part of making people feel cared for, especially caregivers, whether it involves offering remote work options, flexible working hours, or comprehensive parental leave policies. These perks go far in making a company a lot more attractive.

Changing attitudes around female participation in the technology sector will inevitably help narrow the skills gap. STEM businesses are uniquely positioned to recognise and fight biases to create new opportunities for minorities in the tech sector. Of course, communities, schools, and workplaces also need to help change attitudes and encourage female participation in STEM subjects from a young age.

The post Expert Insight: How Diverse Leadership Can Benefit the Security Sector first appeared on IT Security Guru.

The post Expert Insight: How Diverse Leadership Can Benefit the Security Sector appeared first on IT Security Guru.

It’s often argued that the lack of women and non-binary individuals in tech is due to inadequate support, insufficient attention — especially from senior management — and a dearth of those candidates studying subjects such as science, technology, engineering, and mathematics (STEM). It’s a narrative that regularly gets repeated as a part of the conversation about diversity in tech. But the unfortunate reality is that the issues at hand go much deeper.

While simply recognising the problem and having these conversations is a huge step in the right direction, the industry still has a way to go when it comes to gender balance.

Today, there are plenty of women who join our industry with ambitions to lead fulfilling, successful, and rewarding careers, and they come from all walks of life. This is a big improvement from days gone by – and long may it continue.

But, while small steps have been taken to balance the scales, women and non-binary individuals are still vastly outnumbered in these industries. A positive change is long overdue. So, what’s the solution to this longstanding issue?

Widening the talent pool

To broaden their talent pool, businesses within the tech industry should be identifying new recruits through more alternative channels. Community colleges and capture-the-flag events that are designed to test and develop computer security skills in a competitive space are a great place to start. These environments are full of some of the most passionate, eager individuals who may not be getting offers elsewhere because they didn’t attend a top-tier school. I’ve seen it with my own eyes. Identifying new talent from non-traditional channels helps to create a more diverse workforce. Discovering this untapped talent – and keeping hold of it – is exactly what the tech sector needs.

I’m not alone in thinking this way. My colleague, Stephanie Aceves, Senior Director of Product Management at Tanium, also believes that many companies are simply looking in the wrong place.

“One of the reasons we see poor retention for women is because we often limit the focus to diverse recruiting and forget to create environments within our companies that are attractive to female team members,” she said. “Often, women end up somewhat disillusioned in the IT space when they realise that ‘space’ was really never made for them. That’s why we need to act in a way that shows women on the team have a space and are thought of during each phase of their careers.”

Women are being forced out of the industry

But all this effort to recruit new talent is wasted if the industry fails to keep up with the times. Finding talented new employees who are female or non-binary is the first step, but retaining those workers long-term remains a significant challenge.

Personally, I’m passionate about encouraging more women and non-binary individuals to get into IT and cybersecurity – and to remain there throughout their careers. However, more can be done to instil this same level of commitment into the industry as a whole. And when it comes to the reasons those individuals are leaving the sector, the same issues continue to crop up.

While improvements have been made in recent years, many sectors still fail to support the family goals and commitments of women, and the IT and tech industries are no different. Regardless of the skills or potential that an individual has, they may still decide to leave the job – or even the industry itself – because of a non-existent work-life balance or seeming lack of support that they’re offered to manage their other life loyalties.

And, while work has been done to stamp out such attitudes, talented workers could also turn their back on an industry due to the presence of outdated toxic behaviours and opinions within that space.

Despite all the progress that’s been made – and there has been progress – too many women and non-binary individuals are intimidated by what’s seen as the ‘tech bro culture.’ When such an ethos does exist within a company, it’s a systemic issue that can, in some workplaces, foster sexism and harassment – and it’s hard to stamp out.

While less widespread than in the past, it only takes one person to harbour misogynistic views to force dozens of people to quit or even reject offers of employment in the first place.

Offering better benefits and policies

It’s clear that the industry needs to do more to entice female and non-binary workers into the sector and retain existing team members. This means a full commitment from the sector as a whole, rather than individuals tinkering around the edges.

Working together to make the industry more family-friendly and appealing to women is paramount. With this in mind, the three reforms that I would introduce as a matter of urgency are:

  1. We need to recruit from non-traditional avenues and welcome back those who have taken a break to start a family.
  2. We need generous parental leave policies, childcare subsidies and healthy levels of personal time off.
  3. We need to create a supportive environment for those who need leave to start a family or flexible working arrangements to care for dependents.

While these three points seem to primarily support employees who want to have children, the policies benefit parents and non-parents alike. Reducing the likelihood of burnout from overwork at home and in the office, as well as allowing time to care for extended family and one’s mental well-being brings positives for the workforce as a whole.

Incorporating new perspectives, voices and minds can lead to organisations switching up approaches within the business, positively impacting the culture and broadening the company’s appeal to new users or employees. By bringing fresh, different and diverse ways of thinking into the workforce, the wider company always benefits.

Diversity is key to narrowing the skills gap

After all, diversity goes beyond standard demographics. If we are ever to narrow the skills gap that exists in the industry, we need to attract as many different types of people as possible. But there is little point in focusing on recruitment if we fail to provide attractive conditions and fair pay.

Instead of searching for “unicorns” who can do — and know — “everything,” we need to nurture the talent we already have, shaping every employee into a well-rounded, experienced professional. That includes setting aside time for mentorship programmes which help to diversify employee skill sets and build more peer leadership among teams.

Some of the most high-performing teams I’ve worked with have been made up of those who have started a tech career elsewhere — in retail, hospitality, finance, or healthcare — before entering IT.

Despite their different backgrounds, they bring unique insights as consumers of technology and security decision-makers. In my experience, they are able to lend valuable empathy for how security planning will impact other parts of business and unique insights into how to increase adoption and compliance.

Teams where members come from different academic backgrounds — or who offer different professional expertise — also perform well. Having a group that has learned how to solve problems through different examples and curricula means you’re maximising the opportunity for innovation to emerge.

It doesn’t matter which way you look at it: diversity delivers in so many ways and on so many levels. It’s time for the industry to remove barriers and create space. It’s time to act.

The post Expert Insight: What’s the key to bringing more diversity into the tech sector? first appeared on IT Security Guru.

The post Expert Insight: What’s the key to bringing more diversity into the tech sector? appeared first on IT Security Guru.

According to the Department for Science, Innovation and Technology (DSIT), only 17% of the UK cyber sector workforce is female, and this is down from 22% in 2022. To make matters worse, we’re fighting a losing battle against an ever-increasing cyber skills gap. In fact, there’s a shortfall of over 11,000 people to meet the demands of the UK workforce. This issue isn’t exclusive to the UK, however, with ENISA reporting a 300,000 person shortfall in Europe.

Plugging that gap is essential to protecting consumers and building digital trust but it needs to be done so thoughtfully and with diversity in mind. Leading and building the workforce is not just a matter of filling seats. We can’t afford to wait for change; we must actively pursue it.

Breaking Barriers: Dispel the Myths, Celebrate Diversity

How do we get there? We need to celebrate role models who will inspire people from underrepresented groups to overcome the obstacles they face. We need to dispel stereotypes that stand in the way of equality. The ways of thinking that lead to significant innovations—curiosity, ambition, conceptual thinking, and, most importantly, the unyielding belief that you can do it—come about from the way you learn to think. We must make sure that the next generation understands that gender plays no role in anyone’s ability to be an innovator or a leader.

Urgency in Action: The time of change is now!

School curriculums must reflect the world we want to live in. As we know, the cyber sector is a male-dominated space, and therefore women aren’t necessarily presented with the same opportunities. For instance, they might shy away from applying to a cybersecurity role unless they match every single piece of criteria.

This apprehension starts as far back as school years. Current school curriculums and broader societal gender norms wrongly position technology and cybersecurity as male industries. Schools should be doing more to encourage more women into the industry by teaching young girls that they have the same career opportunities and paths to follow as boys. Children need to be aware of all the options available to them, and part of that requires dispelling myths and stereotypes around industries that have historically been perceived as ‘male’ or ‘female’.

Businesses need to offer training opportunities

The responsibility to diversify the cybersecurity space doesn’t solely lie with schools, however. Businesses have a role to play in attracting and retaining female staff by ensuring that their working environments reflect the needs of everyone. For instance, businesses would benefit from offering inclusive policies such as flexible working, adequate maternity leave, or even help with childcare. At the same time, is the cyber industry appealing to career switchers or people returning to work? Is there anything that can be used to incentivise women to work in the cyber sector? These are the questions that businesses need to be asking themselves.

Demanding Change: Action Speaks Louder Than Words

People follow people. Prominent female role models and leaders are crucial when it comes to making cyber more attractive for women. Businesses should forefront their female leaders and ensure that they have diverse recruitment systems in place when looking for the next wave of talent.

By hiring staff from different walks of life and with varying degrees of experience, the industry will benefit from a wide range of skill sets and personality types, from the extremely technical side to the communication skills needed to explain complex topics to those unfamiliar with cyber. Nobody should be stopped from going into cyber if they have the willingness to learn and potential to succeed.

Organisations need to start making changes, as the current picture simply isn’t good enough. In its ongoing efforts to address the cybersecurity skills and gender gap, ISACA has recently partnered with SHE@CYBER to empower women in the sector by offering training. This collaboration supports ISACA’s involvement with other organisations like ECSO, utilizing ECSO’s Women4Cyber initiatives alongside ISACA’s One In Tech foundation’s SheLeadsTech program. These efforts aim to create a new wave of diverse talent for businesses. We need to arrive at a place where women feel empowered and able to train for a career in cyber and join the workforce to close the gap. Without a full and diverse pool of talent, businesses are at risk of increased cyberattacks, leading to damaged customer relationships and ultimately, a breakdown of digital trust.

 

 

 

The post Expert Insight: ‘Minding the gap’: how can we work to make cyber accessible for women? first appeared on IT Security Guru.

The post Expert Insight: ‘Minding the gap’: how can we work to make cyber accessible for women? appeared first on IT Security Guru.

Two formidable female tech leaders have joined forces to launch an innovative new leadership development and mentoring platform for the cyber community – Leading Cyber. 

Danielle Phillips, Founder and Managing Director of Durham based Inside Out, and Director at CyberNorth has collaborated with Annabel Berry, Founder of The Lamplight, experienced CEO, and Chair of the Strategic Board at CyberNorth, and the duo have headed to Dubai to launch the new company to audiences at GISEC Global 2024. 

Leading Cyber was unveiled ahead of the duo visiting UK Cyber Week in London and the leadership development and mentoring platform concept will connect cyber security leaders around the world. The innovative platform will build a global online community for cyber security leaders and cyber business owners to share, connect and grow.

In addition, Leading Cyber will offer a range of services designed to provide people with the connections, tools and skills they need to develop their careers as leaders. The first stage will see the launch of the global mentoring programme, which is now live. The beta mentoring programme is free to join and Leading Cyber are now looking for mentors and mentees to get involved. Simply email hello@leading-cyber.com to register to take part.

Danielle Phillips, Co-founder, Leading Cyber said: 

“I am very excited to launch this new business with Annabel, which compliments my other business ‘hats’ at Inside Out and CyberNorth. if you know either of us, you know we love the world of cyber security.  

We also love leadership and supporting leaders to be the very best they can be. Putting the two things together seemed obvious to us, particularly when we know that cyber leaders often don’t have all of the leadership skills, mentors or support networks they need to be fully effective and successful in their roles. So, this is something we know is needed in our sector. 

The team have flown over to Dubai for the region’s largest cyber security event, GISEC Global 2024 held at the World Trade Centre, Dubai, to showcase the concept at the event which will bring together more than 750 cybersecurity companies and over 20,000 domain experts to discuss challenges in cyber, AI and technology.

Danielle is the Founder and Managing Director of Durham based Inside Out, an internal communications consultancy that has successfully penetrated the tech, HE and cyber security sectors building an esteemed reputation across the field as highly experienced and connected digital transformation and cyber security communications consultants. Working across the UK and globally in the US, Indian and Australian markets to help organisations effectively communicate their digital transformation and major IT projects. 

Annabel Berry combines 25 years of experience founding and leading businesses in the cyber security industry with her voracious appetite for self-learning and development.  Annabel founded The Lamplight last year to focus on leadership development, cultural transformation and building inclusive cultures.

Annabel also continues to focus her energy on encouraging more diversity and inclusivity in the cyber security industry through her work as chairperson of Cyber North, an experienced CEO and former executive director of the Ladies Hacking Society and through voluntary work with CIISec.

Both Danielle and Annabel have been key driving forces in the sector and in their roles at CyberNorth they have supported a number of ground-breaking projects and collaborations to support the region’s thriving cyber security landscape.

Annabel Berry, Co-founder, Leading Cyber said: 

“I’m delighted to join forces with Danielle to launch Leading Cyber, the initial response at UK Cyber Week in London has been great to witness and we can’t wait to unveil this concept globally in Dubai. 

Our new mentoring platform (beta) is driven by the need for better professional connections in cybersecurity, we bridge the gap between aspiring and established professionals, ensuring a swift and effective match, fostering successful mentoring relationships that propel careers.”

The mission at Leading Cyber is to help build the future of cybersecurity leadership through a supportive ecosystem for leaders at all stages. The cyber leadership programmes, off-site workshops, and robust mentoring platform equip individuals to reach their full potential and drive much needed positive change in the industry.

To find out more visit: https://www.leading-cyber.com

The post Female Tech Duo take Flight to Dubai to Launch the future of Cyber Leadership first appeared on IT Security Guru.

The post Female Tech Duo take Flight to Dubai to Launch the future of Cyber Leadership appeared first on IT Security Guru.

According to the Department for Science, Innovation and Technology (DSIT), only 17% of the UK cyber sector workforce is female, and this is down from 22% in 2022. To make matters worse, we’re fighting a losing battle against an ever-increasing cyber skills gap. In fact, there’s a shortfall of over 11,000 people to meet the demands of the UK workforce. This issue isn’t exclusive to the UK, however, with ENISA reporting a 300,000 person shortfall in Europe.

Plugging that gap is essential to protecting consumers and building digital trust but it needs to be done so thoughtfully and with diversity in mind. Leading and building the workforce is not just a matter of filling seats. We can’t afford to wait for change; we must actively pursue it.

Breaking Barriers: Dispel the Myths, Celebrate Diversity

How do we get there? We need to celebrate role models who will inspire people from underrepresented groups to overcome the obstacles they face. We need to dispel stereotypes that stand in the way of equality. The ways of thinking that lead to significant innovations—curiosity, ambition, conceptual thinking, and, most importantly, the unyielding belief that you can do it—come about from the way you learn to think. We must make sure that the next generation understands that gender plays no role in anyone’s ability to be an innovator or a leader.

Urgency in Action: The time of change is now!

School curriculums must reflect the world we want to live in. As we know, the cyber sector is a male-dominated space, and therefore women aren’t necessarily presented with the same opportunities. For instance, they might shy away from applying to a cybersecurity role unless they match every single piece of criteria.

This apprehension starts as far back as school years. Current school curriculums and broader societal gender norms wrongly position technology and cybersecurity as male industries. Schools should be doing more to encourage more women into the industry by teaching young girls that they have the same career opportunities and paths to follow as boys. Children need to be aware of all the options available to them, and part of that requires dispelling myths and stereotypes around industries that have historically been perceived as ‘male’ or ‘female’.

Businesses need to offer training opportunities

The responsibility to diversify the cybersecurity space doesn’t solely lie with schools, however. Businesses have a role to play in attracting and retaining female staff by ensuring that their working environments reflect the needs of everyone. For instance, businesses would benefit from offering inclusive policies such as flexible working, adequate maternity leave, or even help with childcare. At the same time, is the cyber industry appealing to career switchers or people returning to work? Is there anything that can be used to incentivise women to work in the cyber sector? These are the questions that businesses need to be asking themselves.

Demanding Change: Action Speaks Louder Than Words

People follow people. Prominent female role models and leaders are crucial when it comes to making cyber more attractive for women. Businesses should forefront their female leaders and ensure that they have diverse recruitment systems in place when looking for the next wave of talent.

By hiring staff from different walks of life and with varying degrees of experience, the industry will benefit from a wide range of skill sets and personality types, from the extremely technical side to the communication skills needed to explain complex topics to those unfamiliar with cyber. Nobody should be stopped from going into cyber if they have the willingness to learn and potential to succeed.

Organisations need to start making changes, as the current picture simply isn’t good enough. In its ongoing efforts to address the cybersecurity skills and gender gap, ISACA has recently partnered with SHE@CYBER to empower women in the sector by offering training. This collaboration supports ISACA’s involvement with other organisations like ECSO, utilizing ECSO’s Women4Cyber initiatives alongside ISACA’s One In Tech foundation’s SheLeadsTech program. These efforts aim to create a new wave of diverse talent for businesses. We need to arrive at a place where women feel empowered and able to train for a career in cyber and join the workforce to close the gap. Without a full and diverse pool of talent, businesses are at risk of increased cyberattacks, leading to damaged customer relationships and ultimately, a breakdown of digital trust.

The post Expert Insight: ‘Minding the Gap’: How can we work to make cyber accessible for women? first appeared on IT Security Guru.

The post Expert Insight: ‘Minding the Gap’: How can we work to make cyber accessible for women? appeared first on IT Security Guru.

Cybersecurity is ‘inclusive’ by nature: no one is exempt from the fallout of the expanding cyber threat landscape. The notion, therefore, that some groups of individuals are offered fewer opportunities to join the cyber industry than others is frankly absurd.

ISC2’s latest Cybersecurity Workforce Study gives us a snapshot into the supply and demand of cybersecurity talent – and it’s not good news. While the cyber workforce has grown by 8.7%, the skills gap has increased by 12.6%, which equates to roughly 4 million empty roles.

From a DE&I perspective, we have seen gradual improvements; ISC2 reveals that gender and ethnic breakdowns of the new workforce have undergone a considerable shift.

But there’s a lot more that needs to be done. There’s a major paradox at play here: the industry needs more people, yet entire groups of individuals are currently being overlooked.

And it all comes down to the hiring process.

The limitations of CV-led hiring practices

CVs have been the key that unlocks new job opportunities for decades. But when you really think about it, it’s such a restrictive approach.

How can someone possibly capture their skills, their work ethic, their true value in one or two A4 pages? The reality is, they can’t, meaning employers are making critical hiring decisions based on a snapshot of the candidates’ capabilities.

The main piece of information that is impossible to grasp from a CV is the candidate’s potential to succeed in the specific role being recruited for. Past experience can only tell an employer so much, and this is ultimately where talented individuals from non-traditional employment backgrounds fly below the radar.

Our own research shows that 62% of organisations still rely solely on reference checks, CVs and cover letters to screen candidates. With cybersecurity skills in high demand, it’s time we encourage the pursuit of non-traditional candidates to drastically expand talent pipelines and plug the global skills gap.

ISC2 research also revealed that employers value experience over education. Much of the industry will see this as a good thing, but what they haven’t yet realised is that this is still the crux of the skills crisis.

Not all good candidates will have a cybersecurity background. For example, people looking to make a career change are unlikely to demonstrate the ‘expected’ experience, but may still have valuable skills to contribute to the sector.

If job advertisements continue to outline rigid ‘must have’ role requirements like educational credentials, past job titles and years of experience, then huge numbers of talented individuals will be excluded.

It’s time to recognise that experience isn’t everything.

The road to inclusive recruitment 

The tech sector’s growing shift towards skills-based hiring prioritises a candidate’s demonstrable ability, considering the skills they’ve already learned, but also the skills they have the potential to acquire.

Implementing a skills-first strategy requires a shift in HR practices and a broader change management programme, but in doing so it allows the previously underserved to unlock new opportunities.

Instead of relying solely on CVs and credentials, skills-first hiring uses data-driven assessments, aptitude tests, and psychometric evaluations to identify a candidate’s relevant skills and suitability for a variety of roles. By focusing on capabilities and potential, a skills-first approach is able to reduce unconscious bias in the hiring process, opening up opportunities to a more diverse pool of candidates, and enabling organisations to find the best fit for each position, then train the technical skills.

Importantly, this approach can open up a whole new world of possibilities for the cybersecurity sector. Traditional recruitment approaches typically disadvantage underrepresented groups including neurodivergent individuals and women. As a result, viable talent is being overlooked.

For example, our research reveals that autistic individuals typically score 10% higher in their digital skills aptitude than those with neurotypical traits, and score higher than the general population in verbal reasoning. Also, almost a third (32%) of neurodivergent individuals score higher in spatial awareness and 10% higher in digit symbol coding.

Cyber is an industry with pressing needs to modernise recruitment practices. Hiring needs to consider more than just experience – it needs to assess potential.

 

 

 

The post Expert Insight: Outdated Recruitment Methods Are Impeding The Global Cyber Army first appeared on IT Security Guru.

The post Expert Insight: Outdated Recruitment Methods Are Impeding The Global Cyber Army appeared first on IT Security Guru.