The “Global Cyber Security Report 2023” provides a comprehensive analysis of the current state of cybersecurity skills and practices worldwide, with implications that are also relevant for Pakistan.

The report indicates a significant increase in the demand for cybersecurity skills due to digital transformation, remote work, and evolving threat landscapes​. This demand is outpacing the supply of qualified cybersecurity professionals, leading to a global skills gap. About 90% of leaders acknowledged this gap’s impact on their cybersecurity strategies. Private and government organizations face difficulties in recruiting qualified cybersecurity personnel. Two-thirds of leaders expressed concerns about their ability to attract cybersecurity talent​. To mitigate this issue, over half of the leaders are open to hiring candidates without formal IT security accreditations, indicating a shift towards valuing potential and trainability over traditional qualifications.

Despite the increased importance of cybersecurity, nearly half of the organizations expect minimal changes in their cybersecurity budgets​. This could imply a potential mismatch between the growing cybersecurity needs and the financial resources allocated to meet them. The report suggests that upskilling and cross-training are crucial for closing the skills gap. However, the investment in training does not always translate into retaining existing talent, as organizations tend to offer non-monetary incentives over financial rewards​

The report also emphasizes the need for diversity in cybersecurity talent; the report suggests expanding the search for talent beyond traditional criteria to include individuals from various backgrounds and with different skills​

What Pakistan can learn from this report?

Pakistan, like other countries, must address the cybersecurity skills shortage. This involves enhancing education and training programs, fostering public-private partnerships, and incentivizing career paths in cybersecurity. The government and private sectors in Pakistan need to invest adequately in cybersecurity infrastructure and talent development. This includes revising policies to align with global cybersecurity trends and threats. There’s a need to promote cybersecurity as a lucrative and important career choice, especially for the youth. This could involve integrating cybersecurity education into school curricula and offering scholarships for advanced studies in this field. Pakistan should consider broadening its talent search to include individuals from diverse backgrounds, including those without formal qualifications but with potential and a willingness to learn.

The private sector must play a significant role in cybersecurity development by investing in training programs, adopting inclusive hiring practices, and creating pathways for career advancement in cybersecurity. A collaborative approach involving government, industry, academia, and international partners is essential for developing robust cybersecurity capabilities in Pakistan. The report also underscores the need for a strategic approach to address the cybersecurity skills gap. For Pakistan, this means enhancing educational initiatives, investing in cybersecurity infrastructure, and adopting inclusive hiring practices to build a resilient and skilled cybersecurity workforce.