Cybersecurity: The Great Disruptor

• Cyber attacks expected to cost organizations $2.1 trillion globally by 2019

• Level of threats is growing faster than we are growing our capabilities to respond

• Attacks becoming more common - Ransomware, Distributed Denial of Service (DDoS), Social Engineering

• IT systems are becoming more distributed – no real borders to defend

• Attacks and breaches of public and private systems are inevitable

2

2016 Senate Study Committee on Data Security and Privacy

Cybersecurity: #1 Disruptor

3

Potential Disruptors in IT Over the Next Five Years1

1Ranked by order, survey of 1,656 global IT professionals, Technology: Voice of the Workforce Report

Cybersecurity 47%

Political/policy changes 42%

Internet of Things 40%

Big Data 40%

Automation technologies replacing traditional human processes 39%

Increasing customer/consumer demands 32%

Talent/skills shortage 32%

People keeping pace with technology 31%

Disruption to Skills Needed Now and in the Future

• Cybersecurity workforce is not keeping pace with need

– U.S. cyber workforce faces a 1.8 million worker shortage by 2022

• Currently 0% unemployment rate

• Each year in the U.S. there are 128,000 openings for IS Analysts, but only 88,000 workers currently employed in those positions – a talent shortfall of 40,000 workers

• Georgia today: Total employed cybersecurity workforce = 28,368 Total cybersecurity job openings = 12,783

4

Disruption to Traditional IT Career Path

5

• Continuous learning to meet constantly evolving threats

• Student-teacher-student cycle

• Hands-on experience

• Advanced skills required

Disrupting Business Plans and Priorities

• Reprioritize cybersecurity to a higher level

• Need more cybersecurity awareness – to educate state employees and citizens alike

• Need greater consistency and clarity on cyber responsibilities across state agencies

• Increasing cyber threats will require increasing investments

• Need to enhance law enforcement cyber capabilities

• Cyber insurance can provide necessary protection for the state

6

Disrupting Normal Work Behavior

• 43% of cybersecurity risks arise internally through employees acting irresponsibly or simply unaware2

• Staff training on security awareness and best practices is critical

• The organization is only as strong as the weakest link

• Management responsibility for cyber plans, education, training, recruiting

2 Study by Intel Security

7

Disrupting Georgia’s Place in the WorldGeorgia is becoming an important cybersecurity nexus

• US Army Cyber Command • US Army Cyber School of

Excellence• National Security Agency (NSA)• Georgia Cyber Innovation and

Training Center• Georgia Cyber Workforce Academy

8

Thank You!

9