Hiring a Cybersecurity Expert? 3 Key Considerations

by | Feb 17, 2016 | Security | 0 comments

The demand for cybersecurity professionals continues to grow, but resources are scarce. In this environment, how do you build the right security team?  Research indicates that job postings are growing quickly, salaries are rising, and qualified team members are hard to find.

We’ve summarized three key items to consider as you build your team. All that demand for cybersecurity professionals is great news for the technical folks who hold those skills and necessary certifications. It’s difficult, however, for employers who are starting to deal with a rapidly growing need for cybersecurity solutions that protect their companies. With threats ranging from CryptoLocker and data leakage to simply needing to meet regulatory requirements or reduce cyber insurance premiums, here are a few things to keep in mind.

1.      Cybersecurity is a broad area that covers a wide variety of skills

Cybersecurity covers a number of skills – from penetration testing to security architecture and auditing. It may include implementation of multiple pieces of software that are used to both monitor and mitigate different types of risks or have a social engineering component. No one person is going to fill every role necessary to implement a comprehensive solution. A team approach is necessary to both cover the needed skill sets and to ensure that all aspects of work get done.

2.      Independence matters

Just like your auditors need to be independent, the members of your cybersecurity team should be able to operate with enough independence to do their jobs. They need to feel that it’s safe to actually report needed changes to the environment, recommend solutions, and monitor threats, without worrying that there will be conflict between their jobs and the rest of the company.

3.      Regulatory requirements may impact your decision

Do you have regulatory requirements that can be hard to meet with limited internal staff? For example, PCI (Payment Card Industry) standards require that logs be reviewed daily.  Do you want your internal security team focused on that type of process, or do you want them focused on specific internal initiatives that are key to your business strategy? Breaking your needs down into which ones are best handled by an internal team member and which ones will get you the most bang for your buck when outsourced is an important consideration as you move forward.

As a business owner, how are you going to tackle getting your cybersecurity team up and running? One way is to consider a hybrid approach.

  • Leverage your security solutions partner to handle an initial audit while you are searching for an internal security resource.
  • Focus your search on the skill sets most needed by your organization, rather than trying to hire a generalist.
  • Hire a managed security team to handle ongoing monitoring of potential threats within your environment and keep you up-to-date on current events (our This Month In Cyber Security webinars can help you stay current as well). This will also let you keep your internal resources focused on your key initiatives, rather than day-to-day monitoring.

Want to talk about protecting your most valuable business assets? Give us a call or drop us a line.