--- title: CISOs Who Close Critical Skills Gaps Stand the Best Chance of Minimizing the Impact of Cyberattacks description: CISOs who reduce their critical IT departments’ skills gaps have the highest probability of minimizing the business impact of cyberattacks, new research shows image: https://businessinsights.bitdefender.com/hubfs/CEO.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) By [**Filip Truta**](https://businessinsights.bitdefender.com/author/filip-truta) / Jul 28, 2020 # CISOs Who Close Critical Skills Gaps Stand the Best Chance of Minimizing the Impact of Cyberattacks Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/cisos-who-close-critical-skills-gap-stand-the-best-chance-of-minimizing-the-impact-of-cyberattacks&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/cisos-who-close-critical-skills-gap-stand-the-best-chance-of-minimizing-the-impact-of-cyberattacks&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/cisos-who-close-critical-skills-gap-stand-the-best-chance-of-minimizing-the-impact-of-cyberattacks&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/cisos-who-close-critical-skills-gap-stand-the-best-chance-of-minimizing-the-impact-of-cyberattacks&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/cisos-who-close-critical-skills-gap-stand-the-best-chance-of-minimizing-the-impact-of-cyberattacks&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/cisos-who-close-critical-skills-gap-stand-the-best-chance-of-minimizing-the-impact-of-cyberattacks&utm_medium=social&utm_source=facebook) CISOs who reduce or close their critical IT departments’ skills gaps have the highest probability of minimizing the business impact of cyberattacks – even when budgets and staffing are constrained, according to a SANS Institute study. With the exception of very small businesses and government institutions, turnover and attrition rates for cybersecurity staff is at or below industry averages, according to the SANS [report](https://www.prnewswire.com/news-releases/sans-survey-explores-path-to-closing-the-critical-skills-gap-for-a-modern-and-effective-security-operations-center-soc-301096748.html) titled “Closing the Critical Skills Gap for Modern and Effective Security Operations Centers (SOCs)," to be released in a two-part webcast on July 29 and July 30. However, security managers admit they tend to fall back on attrition as the reason for requesting staff increases, which reflects a lack of meaningful cybersecurity metrics at many organizations, SANS researchers said. Survey respondents said security operational skills were the most needed, and cloud security skills were more sought after than network or endpoint security skills. Respondents also agreed that the most successful source of new cybersecurity employees was the company's existing internal IT staff. Yet hiring managers indicated they would rather see new hires with hands-on experience using common cybersecurity products – open-source tools, in particular. While IT departments are sometimes understaffed, even at big enterprises, it’s not the headcount that matters, according to the data. Rather, it’s actual hands-on experience that moves the needle, says John Pescatore, survey author and SANS Director of Emerging Security Trends. "This skills gap survey once again pointed out that despite all the headlines about a cybersecurity headcount shortage, it is really a skills gap – security people with hands-on experience with the top security tools and how to use them across hybrid cloud/on-premises systems are being hired for the skills, not just to add bodies," Pescatore notes. "By investing in training and tools skills as well as the maintenance of those skills, the increased productivity and reduced security staff attrition provides a huge return on investment." The SANS Institute was established in 1989 as a cooperative research and education organization. Today, it is the world’s largest provider of cyber security training and certification to professionals in government and commercial institutions. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [Cloud Security Budgets Increase Substantially in 2018 as CISOs Recognize the Dangers Out There](https://businessinsights.bitdefender.com/cloud-security-budgets-increase-substantially-in-2018-as-cisos-recognize-the-dangers-out-there?hsLang=en-us) ### [The Future of Endpoint Security and Other Cyber Controls](https://businessinsights.bitdefender.com/the-future-of-endpoint-security-and-other-cyber-controls?hsLang=en-us) ### [Infosec Professionals Are More Worried About Corporate Security than Their Own Home Security](https://businessinsights.bitdefender.com/infosec-professionals-are-more-worried-about-corporate-security-than-their-own-home-security?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Filip Truta", "url" : "https://businessinsights.bitdefender.com/author/filip-truta" }, "dateModified" : "2020-07-28T07:15:00.355Z", "datePublished" : "2020-07-28T07:15:00.000Z", "headline" : "CISOs Who Close Critical Skills Gaps Stand the Best Chance of Minimizing the Impact of Cyberattacks", "image" : [ "https://businessinsights.bitdefender.com/hubfs/CEO.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/cisos-who-close-critical-skills-gap-stand-the-best-chance-of-minimizing-the-impact-of-cyberattacks", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```