Security Skills Shortage, Or Training Failure?

[InfoSec News <alerts () infosecnews org>]

http://www.informationweek.com/security/management/security-skills-shortage-or-training-fai/240005917

By Mathew J. Schwartz
InformationWeek
August 21, 2012

Almost two-thirds of businesses say their information security 
departments are understaffed, and 51% say they can't find people with 
the required security skills.

Those findings come from a new Forrester Consulting report, "Security 
Intelligence Can Deliver Value Beyond Expectations And Needs To Be 
Prioritized," that was commissioned by IBM Global Technology Services. 
To make its point, the report largely references a Forrester Research 
survey of 2,400 executives and technology decision-makers at North 
American and European businesses, conducted more than a year ago.

According to the report, 53% of businesses say they can't find enough 
suitable employees to run in-house security intelligence programs. It 
describes security intelligence as "the real-time collection, 
normalization, and analysis of the data generated by users, applications 
and infrastructure that impacts the IT security and risk posture of an 
enterprise."

Not coincidentally, the report notes that security intelligence programs 
can be largely automated, thus eliminating the need for so many warm 
bodies. Cue complementary findings, such as one chart titled: "security 
intelligence as a service overcomes all challenges to deliver amazing 
value," which is sourced to a May 2012 survey of "75 North American, 
U.K., and Indian IT security enterprise decision-makers."

[...]