Demand for information security professionals has already started exceeding supply. It’s a trend that, if allowed to continue, could seriously affect the rate of technological advancement. There is a 1.5 million shortage expected within five years, according to Frost and Sullivan’s latest Global Information Security Workforce Study, although the effects of security skills scarcity can already be seen. Response time to incidents appears to be increasing, which points to a mounting pressure among security professionals. Only 20% feel confident that response to a system or data compromise can be carried out within one day, which is down from 33% in 2013.

Galix Networking's MD and QSA, Simeon Tassev, says the reason for this shortage has to do with the length of time it takes to qualify as a security professional.