As the shortage of skilled security staff widens, the effects on policy and products in overall security organization must be factored into the choice to pursue alternative sources of talent.

Several CISOs I’ve spoken recently have lamented, while cybersecurity assurance stands on three legs – people, policy and products – the industry is weighted down by one overarching problem: a shortage of talent with the right skills.
It’s true of course, but it’s also a little more involved because a decision about any one of the three legs has a relational effect on the others. A skills shortage isn’t just a human resources problem, it also has implications for policy and products too.

Read more…