Cyber-security has an image problem: here’s how to fix it

Lisa Ventura MBE at Cyber-Security Unity explains the mistaken perceptions that are discouraging many people from starting careers in information security and proposes ways of addressing the industry’s image problem

 

In recent years, the field of cyber-security has emerged as a critical sector, safeguarding our digital infrastructure from ever-evolving threats. Yet, despite its significance, there exists a disconcerting trend: a growing number of people are leaving the cyber-security industry.

 

This concerning mass exodus of talented and capable people has raised important questions and shed light on the underlying challenges faced by professionals in the cyber-security industry.

 

There are many reasons behind the number of people leaving the industry, which range from them being the target of bullying and abuse, and the impact of work-life balance challenges, to gender bias and discrimination, the gender pay gap and a lack of representation and mentorship.

 

On top of this, cyber-security has a massive image problem, with many who leave the industry stating that they do not feel welcome in cyber-security because of that image problem.

 

Cyber-security: It is all in the mind

When the term "cyber-security" comes to mind, what do you envision? For many, it conjures images of hackers in hoodies, intricate motherboard diagrams, padlocks, and binary code.

 

However, the perception of cyber-security goes beyond these clichés, and it can also encompass faceless cyber-attackers sporting hoodies, military symbolism, and war rhetoric, and even the notion of cyborgs or futuristic machines battling in space. This is especially true when it comes to the depiction of artificial intelligence.

 

Despite criticism from cyber-security experts, these exaggerated portrayals persist without showing signs of subsiding.

 

Interestingly, academia has recently taken a keen interest in discussing these depictions, exploring the role of humans in an industry that is increasingly faceless, militarised, detached from reality, and driven by artificial intelligence (AI). These portrayals pose a threat to the industry as they create a sense of powerlessness among the public.

 

At its core, the image problem of cyber-security stems from several key factors that shape public perception. These include:

 

Misconceptions and stereotypes: major challenge is the prevalence of misconceptions and stereotypes surrounding the field of cyber-security. It is often seen as a domain exclusively reserved for technical geniuses and hackers in dark rooms, perpetuating the image of a mysterious and inaccessible field.

 

Such stereotypes can discourage individuals, particularly women and underrepresented groups, from considering careers in cyber-security, hindering diversity and the acquisition of new talent.

 

Fear and negative association: Cyber-security is frequently associated with negative incidents, such as data breaches, cyber-attacks, and privacy violations. These high-profile incidents can create fear and a sense of helplessness among the general public.

 

As a result, the field is often seen as reactive rather than proactive, perpetuating the perception that cyber-security only becomes relevant in the aftermath of an attack. This reactive stance can overshadow the positive impact and proactive measures taken by cyber-security professionals.

 

Complexity and lack of awareness: Cyber-security is a complex and ever-evolving field, which can make it challenging for the general public to grasp its nuances. Lack of awareness about the role and importance of cyber-security can lead to underestimation of its significance and the resources required to protect against cyber threats.

 

This lack of understanding can hamper support for cyber-security initiatives and investment in robust defence systems.

 

Media portrayal: Media coverage often sensationalises cyber incidents, focusing on the dramatic aspects of breaches rather than the underlying issues and preventive measures.

 

While these incidents are newsworthy, the disproportionate emphasis on sensationalism can perpetuate a distorted image of cyber-security, reinforcing the notion that it is an insurmountable problem rather than an ongoing challenge that can be addressed through collective efforts.

 

Addressing the image problem of cyber-security

Addressing the image problem of cyber-security is crucial for the industry’s growth, resilience, and public support. It requires concerted efforts from various stakeholders, including cyber-security professionals, organisations, educational institutions, media, and policymakers. Strategies to improve the industry’s image include:

 

Education and awareness campaigns: Promote initiatives that raise public awareness about the importance of cyber-security, demystify the field, and highlight its positive impact on society. Emphasise the role of cyber-security in protecting individuals, organisations, and critical infrastructure, and the career opportunities available in the field.

 

Diverse representation: Encourage diverse representation within the cyber-security industry, showcasing the wide range of professionals from different backgrounds, genders, and ethnicities. Highlighting successful role models can challenge stereotypes and inspire a broader range of individuals to consider careers in cyber-security.

 

Collaboration and transparency: Foster collaboration between cyber-security professionals, organisations, and the media to promote accurate and balanced reporting on cyber incidents. Encourage transparency in disclosing incidents, sharing lessons learned, and highlighting successful defence strategies. By showcasing effective preventive measures, the narrative can shift from doom and gloom to proactive and empowering solutions.

 

A concerted effort is needed

The image problem facing the cyber-security industry will take concerted efforts and a shift in narrative to change, but by fostering awareness, collaboration, inclusivity, and engagement, we can reshape the public perception of cyber-security and create a more accurate and empowering image of the industry.

 

Addressing cyber-security’s image problem and creating a more inclusive and supportive environment is also crucial to retaining people in the cyber-security field. Through addressing biases, providing mentorship, promoting work-life balance, and offering equal opportunities, organisations and the industry as a whole can encourage more people to remain in cyber-security and thrive in their careers.

 

---

 

Lisa Ventura MBE is the founder of Cyber-security Unity, a global community organisation that is dedicated to bringing individuals and companies together who actively work in cyber-security to help combat the growing cyber-threat.

 

Lisa is also a member of International Cyber Expo’s Advisory Council which is chaired by Professor Ciaran Martin CB, former CEO of the NCSC. International Cyber Expo takes place at London Olympia on the 26th and 27th September 2023). For more information visit: www.internationalcyberexpo.com.

 

Main image courtesy of iStockPhoto.com