I found this little gem of an article today, which reminded me of the importance of finding and training cybersecurity professionals. It's no secret there aren't enough well qualified professionals (or cyber warriors) to keep up. But it might be a secret that the ones with the training don't always have a career path to follow.
Cybersecurity skills range from understanding operating systems, hardware, development, forensics, intrusion detection, audit, engineering, law, prosecution, and many more. The field is growing at an alarming rate, perhaps to the detriment of companies that neither have the resources nor the manpower to fight back. But even the employees who have worked in the field for a significant period of time don't always know what they have to do to take the next career step. For example, how much development does a government chief information officer need to know?
These are the questions that now plague companies trying to wade through the complicated mess of cybersecurity. If you have are a security professional who has grown a relatively small skill set into a successful and versatile career, I would love to profile your journey. While SANS, my employer, remains committed to narrowing down the career paths via a consensus research project, there's nothing better than hearing from those individuals who have already done it. Please take a minute to leave your story in the comments section or e-mail them to me at aross@nextgov.com.
Adam Ross is managing editor at the SANS Institute and wrote, edited, and Web produced for The Washington Post's opinions and politics sections, online and in print. You can reach him at aross@nextgov.com.
COMMENTS
There was one item understated: Accountability.
On an edpAudit, I first see what equipment is plugged in. After determining we are plugged in, I ask who is accountable for operations.. Not receiving a proper answer normally, I find two of the culprits which leads to a firm "Lets noodle" meeting of those all that should have answered positively. Should we not determined how we got here and who is along for the ride. We observe a false scence of security. The average cyber warriors need training hands on. Many intrusions are created within the company its self by ignorance.
I would love to see a syllabus by an educator with and on accountability from the mind to the keyboard ; Hands on.on now, minds in gear..
Michael Rt Eagan 09/05/10 02:20 pm ET