The Asia Pacific region is experiencing the biggest workforce shortage in cybersecurity at about 2.14 million, according to a Cybersecurity Workforce Study by International Information System Security Certification Consortium (ISC2). While the awareness of the cybersecurity skills shortage has been growing worldwide, the workforce gap continues to grow, putting organizations at risk. Despite increases in tech spending, this imbalance between supply and demand of skilled professionals continues to leave companies vulnerable. 

The survey revealed that cybersecurity is a budget priority for companies, but cyber-security pros consistently say that it is not a high enough priority. The study urges supporting the people focused on cybersecurity which will help organizations build more cyber resiliency across their operations. Naturally, security budgets play a role in cybersecurity preparedness and staffing. 

According to the research, the shortage of cybersecurity professionals is close to three million globally. APAC is experiencing the highest shortage, at around 2.15 million, which is attributed to its growing economies and new cybersecurity and data privacy legislation being enacted throughout the region.

While a substantial number of companies are planning to hire more cybersecurity staff in the next 12 months, almost the same percentage expect either no change in staffing or possibly even a reduction, says the report.

Cybersecurity pros are hindered by the costs associated with training and certifications. While some companies cover the costs for professional development, the costs can be challenging for those trying to enter the field. In spite of this, these individuals understand the value the right certification can have for their career development, and more than half of all respondents globally (54%) are either pursuing cybersecurity certifications or plan to within the next year.

To overcome the challenges to cybersecurity, the study recommends professional development as the ideal tool for keeping up with the rapid changes in cybersecurity—and turning the job into an exciting career opportunity. When it comes to professional development in the workplace, the study revealed a sizable disconnect between what survey respondents find most beneficial and what companies are offering. Respondents ranked face to-face, instructor-led training as the most valuable; however, that method was fifth on the list of training resources companies provide.