Growing cloud security skills gap impacts organisational defence

October 2024 Information Security, News & Events

Check Point Software Technologies issued a stark warning; as cloud environments grow, organisations struggle to protect them due to a lack of cybersecurity expertise. The 2024 Cloud Security Report indicates a significant skill gap, with more than half of surveyed security professionals rating their team's capabilities as average or below.

• Rise in cloud security incidents: 61% of organisations experienced at least one security incident related to public cloud use in the past year, a significant increase from 24% the previous year. Data breaches are the most common and can lead to severe fines and reputational damage. The upcoming NIS2 directive will likely heighten the impact of such breaches.

• Barriers to cyber security defence: Lack of security awareness among employees is the top barrier, cited by 41% of experts. A shortage of qualified personnel is another major concern, with 32% of respondents identifying a lack of cybersecurity skills as a key issue for organisations.

• Training and skills gap: Despite the importance of cybersecurity training, 44% of organisations only provide training annually. A mere 26% conduct monthly sessions, contributing to a skills deficit and increasing vulnerability to sophisticated cyberattacks.

• Shortage of cybersecurity experts: 76% of survey respondents reported a shortage of cybersecurity experts within their organisations. Despite facing more sophisticated threats, 52% rated their team’s security skills as average or below average, risking significant financial damages from successful attacks.

• Impact of AI technologies: The integration of AI and ML technologies intensifies the need for new skills; 49% of respondents indicated a need for their security experts to acquire new AI-related skills, while 35% are concerned about the lack of knowledge hindering AI adoption. Access to training and resources is crucial for overcoming these barriers.

"Organisations must prioritise education and prevention in cybersecurity," says Lionel Dartnall, Check Point Acting Country Manager, South Africa. "It is concerning that while 40% of organisations view prevention and mitigation as their biggest challenge, only 21% prioritise it. This disconnect suggests that many do not believe prevention is achievable in their current state."

"Companies must reassess their approach to security, prioritising prevention, education, and the use of top-tier security solutions. In cybersecurity, second best is not enough," Dartnall adds.

Currently, 36% of organisations doubt their ability to handle unknown risks and zero-day attacks like Log4j, while 55% have some confidence, but still harbour concerns. However, sophisticated solutions like Check Point CloudGuard offer advanced protection, enhancing the overall security posture. As part of the Check Point Infinity Platform, CloudGuard enables centralised and automated security management, compliance, and policy enforcement, providing comprehensive visibility and control over cloud environments.

To address the cybersecurity skills gap, Check Point is actively involved in education through its Infinity Platform Services. This includes providing a variety of training programmes and certification courses, incorporating interactive and gamified learning methods such as escape rooms and hacker hunts to make learning engaging and effective. These resources help organisations elevate their security teams to the next level of expertise.

Organisations facing technological challenges or skill gaps need to proactively update their strategies. Cyber criminals relentlessly exploit any weakness, making it crucial for companies to strengthen their defences and adapt to the evolving threat landscape.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Want effective Attack Surface Management? Think like an attacker.
Information Security
Effective ASM requires companies to think like attackers, anticipate risks, and act decisively to reduce exposure by knowing their environment, deploying a structured approach, leveraging capable tools, and addressing both internal and external risks.

Read more...
The growing role of hybrid backup
Infrastructure Information Security
As Africa’s digital economy rapidly grows, businesses across the continent are facing the challenge of securing data in an environment characterised by evolving cyberthreats, unreliable connectivity and diverse regulatory frameworks.

Read more...
POPIA non-compliance puts municipalities at risk
Information Security Government and Parastatal (Industry)
Digital responsibility must go beyond POPIA compliance to recognising that privacy and service delivery are fundamentally linked. Despite this, only 51 out of 257 municipalities submitted their mandatory data protection and access to information reports in 2024.

Read more...
Choicejacking bypasses smartphone charging security
News & Events Information Security
Choicejacking is a new cyberthreat that bypasses smartphone charging security defences to confirm, without the victim’s input or consent, that the victim wishes to connect in data-transfer mode.

Read more...
Most wanted malware
News & Events Information Security
Check Point Software Technologies unveiled its Global Threat Index for June 2025, highlighting a surge in new and evolving threats. Eight African countries are among the most targeted as malware leaders AsyncRAT and FakeUpdates expand.

Read more...
Firexpo 2025 ignites interest in fire safety
Fire & Safety News & Events
Firexpo 2025 showcased fire detection, suppression, and safety tech, drawing professionals eager to explore innovations, gain insights, and connect with suppliers.

Read more...
Welcome to the new cyber battleground
Information Security
The Iran-Israel conflict is rapidly redefining modern warfare, pushing the boundaries of cyber capabilities and creating a new, borderless digital battlefield. Fortinet’s CISO, Dr Carl Windsor, offers a critical, in-depth analysis of the escalating tactics and global implications in his latest report.

Read more...
African industries may overestimate cyber defences
Information Security
] A significant perception gap exists in security awareness training: 68% of leaders believe training is tailored to roles, yet only a third of employees feel adequately trained. Many organisations only conduct annual or biannual generic training that may not effectively change behaviour.

Read more...
SMARTpod talks to Sophos and Phishield
SMART Security Solutions Technews Publishing Sophos Videos Information Security News & Events
SMARTpod recently spoke with Pieter Nel, Sales Director for SADC at Sophos, and Sarel Lamprecht, MD at Phishield, about ransomware and their new cyber insurance partnership.

Read more...
Cybersecurity and insurance partnership for sub-Saharan Africa
Sophos News & Events Information Security Security Services & Risk Management
Sophos and Phishield Announce first-of-its-kind cybersecurity and insurance partnership for sub-Saharan Africa. The SMARTpod podcast, discussing the deal and the state of ransomware in South Africa and globally, is now also available.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.