More than three-quarters (75%) of chief information security officers (CISOs) admit that they are facing a critical cyber-skills gap crisis, according to new research from cybersecurity services provider RiverSafe.

The findings were revealed in Underfunded and Under Reported: Threats, Breaches, and Budgets report, a survey of 250 UK CISOs conducted by independent polling agency Censuswide, which highlighted concerns from security leaders around the large cyber gap within organisations.

The NCSC and UK government are continuing the aim to better cyber-skills training across the UK. The CyberFirst programme, created by the NCSC, was launched to introduce young people, aged 11-17, to the fast-paced world of cyber security.

Furthermore, the government launched the Cyber Explorers scheme last year, urging schools to enrol their students. This initiative is a free learning platform for 11-14 year olds, aiming to equip young people with essential cyber-skills.

This supports the government’s £2.6 billion National Cyber Strategy, which focuses on enhancing cybersecurity skills at all levels. By participating in Cyber Explorers, schools contribute to a nationwide effort to strengthen online safety and prepare the next generation for a future in cybersecurity.

However, 83% of CISOs currently believe their organisations have a gap in their cybersecurity skills, leaving them extremely vulnerable to ever-evolving cyber threats. This is particularly concerning when only 39% of CISOs are prioritising the closure of this skills gap in 2024, according to the report.

In fact, 60% of CISOs revealed that investing in hiring and training dedicated cybersecurity staff is draining too many resources, suggesting it is not currently a priority.

Furthermore, with two-thirds (63%) of CISOs admitting that their organisation does not have enough visibility over devices, networks, and applications, the challenge of managing cyber-threats effectively intensifies, especially with the skills gap.

Although, with 32% of CISOs stating their organisations have a Security Operation Centre (SOC) team, in comparison to 72% stating their organisation is utilising AI as part of its cybersecurity defence, the reports findings suggest that there is a significant shift towards relying on AI for cybersecurity rather than human-operated skills.

Suid Adeyanju, CEO at RiverSafe, commented: “It is essential that CISOs make it a priority to close the cyber gap, in order to keep their organisation safe in an era of heightened threat. As cyber-attacks become increasingly complex, especially with the rise of AI, proactive measures are essential to protect sensitive data and assets.

Recommended reading

• Which UK Regions Are the Best and Worst for Basic Digital Skills?
• AI Skills Gap Puts Public Sector Projects in Jeopardy
• Demand for AI Skills Set to Skyrocket in 2024

“AI development is showing no signs of slowing down and organisations are increasingly adopting AI technologies as part of their business operations. While there are obvious benefits, it is also vital to recognise the security challenges that AI bring, especially when it comes to CISOs oversighting devices, and applications.

Ultimately, cybersecurity and cyber-crime are still conducted by people, so it is important for security teams not to lose sight of investing in people, even in an era of AI and automation.