Recent headlines are littered with stories about data breaches and cybersecurity woes at major companies. As companies increase digital operations, information becomes vulnerable. While there are ways to protect that information, new research shows that there are not enough trained workers available to make that happen.

A recent study by ISC2, a nonprofit association of certified cybersecurity professionals, found there is a gap of almost 3 million cybersecurity jobs. The survey gathered information from 1,500 global respondents from North America, Latin America, Europe and the Asia-Pacific region. The gap was calculated with many factors in mind, including the percentage of organizations with openings and projected growth for companies of all sizes.

The impact of this shortage is already impacting the cybersecurity workforce, the report said. Among the respondents, 63% report that their organizations have a shortage of IT staff dedicated to cybersecurity. Consequently, almost 60% said their companies are at moderate or extreme risk of a cybersecurity attack. This is partly due to a lack of available formal cybersecurity learning opportunities, training and skill development.

On a more optimistic note, 48% said they expect an increase in cybersecurity-related hires, compared to 39% who expected their staff to remain static.

Companies can help shrink the gap by offering more training opportunities for employees, ISC2 suggests. These opportunities could include professional development courses, conferences and instructor-based training. Due to the rapid changes in this field, continual learning opportunities are crucial for success.

The cybersecurity workforce by the numbers

• Age: Generation X and baby boomers make up 49% of the current cybersecurity workforce, and millennials and Generation Y comprise 35% of the field.
• Gender: Women represent about 24% of the field. This number is higher than past ISC2 report because the latest survey broadened the definition of a cybersecurity job.
• Salary range: Typically between $67,000 and $88,000.
• Structure: An estimated 23% of cybersecurity workers report to a general security department, but most (65%) report to an executive not focused on cybersecurity.
• Education: An estimated 34% have a master’s degree and 39% have a bachelor’s degree.
• Tenure: Cybersecurity professionals reported working an average of 13 years in an IT role, and an average of seven years specifically working on cybersecurity initiatives.

For the full study, click here.