Security Skills Shortage Puts Firms at Risk
With ever-changing technology comes threat actors who continuously find ways to identify and exploit technical vulnerabilities. Today, owners and managers of firms across multiple industries understand the need for threat intelligence to protect their systems and data.
An unfortunate consequence of using threat intelligence tools to secure an organization’s data is the constant influx of threat data the organization receives daily. Coupled with a current cybersecurity skills shortage, firms are becoming increasingly vulnerable to cyberattacks.
Google Cloud Study Highlights a Dire Situation
To better understand the issues security professionals are facing regarding threat intelligence, Google Cloud commissioned a study by Forrester Consulting. For the study, the consulting firm queried 1,541 tech professionals who are at director-level or higher. The respondents come from eight counties and businesses across 12 industries with at least 1,000 employees.
The study shows that 61% of IT and security professionals are experiencing burnout over threat intelligence data feeds. The sheer volume of information is overwhelming experienced teams, causing them to develop alert fatigue.
Another aspect of the survey highlights the problem with the current cybersecurity workforce shortage. More than half of the respondents claim not to have enough skilled security personnel to go through the data to identify possible threats from false flags. Teams struggle to verify the validity of information and make it actionable, according to 59% of respondents.
Some industries have more worries about data threats than others. About 89% of respondents within the manufacturing industry claimed they were “concerned” or “very concerned” about overlooking actual threats due to excessive data and alerts.
Is Threat Intelligence Overload As Serious As It Seems?
Cybersecurity skills shortages and data overloads are increasing the risk exposure for firms. According to the above-mentioned Google Cloud study, 86% of respondents claim the security skills gap is causing their organizations to struggle with understanding their threat landscape.
Failing to stay ahead of threats is concerning. With teams lacking sufficient personnel and experience, plus a constant barrage of data, the risk of a cyberattack manifesting increases. An incident response delay could also occur, jeopardizing firms’ ability to bounce back quickly from a cyberattack.
The Answer: Artificial Intelligence
The Google Cloud study includes several recommendations for security professionals to reduce their overload and improve efficiency. One of the main points within these recommendations is for security leaders to use threat intelligence as a capability to avoid flagging most of the raw data they receive. By treating threat intelligence as a process, professionals can better separate false alarms from actual threats.
Regarding the cybersecurity skills shortage, many are turning to AI as the solution instead of investing in training. With artificial intelligence, firms can make more efficient use of threat intelligence.
For instance, AI could generate summaries or suggest next steps. Integrating AI could also handle repetitive tasks, giving IT and security leaders greater leeway to focus on more pressing issues.
