Threat | Trends cont’d

• Demand for solutions exceeds supply

  • Demand increasing rapidly
  • Supply effectively flat or increasing slowly
    • Best countermeasure: specialized human expertise...
      • Security specialists
      • System administrators
  • ...Who are well-trained, experienced, informed
    • Training: Certifications and education initiatives increase supply but at a lower rate than demand
    • Staying informed very hard and time-consuming
      • Nearly impossible when working full-time
      • CISSP and SANS certifications expire without continuing education and/or periodic retest
      • Effectively decreases supply
    • Government speaker: “Wanting a security consultant real bad may mean getting a security consultant real bad.”