Growing cloud security skills gap impacts organisational defence

October 2024 Information Security, News & Events

Check Point Software Technologies issued a stark warning; as cloud environments grow, organisations struggle to protect them due to a lack of cybersecurity expertise. The 2024 Cloud Security Report indicates a significant skill gap, with more than half of surveyed security professionals rating their team's capabilities as average or below.

• Rise in cloud security incidents: 61% of organisations experienced at least one security incident related to public cloud use in the past year, a significant increase from 24% the previous year. Data breaches are the most common and can lead to severe fines and reputational damage. The upcoming NIS2 directive will likely heighten the impact of such breaches.

• Barriers to cyber security defence: Lack of security awareness among employees is the top barrier, cited by 41% of experts. A shortage of qualified personnel is another major concern, with 32% of respondents identifying a lack of cybersecurity skills as a key issue for organisations.

• Training and skills gap: Despite the importance of cybersecurity training, 44% of organisations only provide training annually. A mere 26% conduct monthly sessions, contributing to a skills deficit and increasing vulnerability to sophisticated cyberattacks.

• Shortage of cybersecurity experts: 76% of survey respondents reported a shortage of cybersecurity experts within their organisations. Despite facing more sophisticated threats, 52% rated their team’s security skills as average or below average, risking significant financial damages from successful attacks.

• Impact of AI technologies: The integration of AI and ML technologies intensifies the need for new skills; 49% of respondents indicated a need for their security experts to acquire new AI-related skills, while 35% are concerned about the lack of knowledge hindering AI adoption. Access to training and resources is crucial for overcoming these barriers.

"Organisations must prioritise education and prevention in cybersecurity," says Lionel Dartnall, Check Point Acting Country Manager, South Africa. "It is concerning that while 40% of organisations view prevention and mitigation as their biggest challenge, only 21% prioritise it. This disconnect suggests that many do not believe prevention is achievable in their current state."

"Companies must reassess their approach to security, prioritising prevention, education, and the use of top-tier security solutions. In cybersecurity, second best is not enough," Dartnall adds.

Currently, 36% of organisations doubt their ability to handle unknown risks and zero-day attacks like Log4j, while 55% have some confidence, but still harbour concerns. However, sophisticated solutions like Check Point CloudGuard offer advanced protection, enhancing the overall security posture. As part of the Check Point Infinity Platform, CloudGuard enables centralised and automated security management, compliance, and policy enforcement, providing comprehensive visibility and control over cloud environments.

To address the cybersecurity skills gap, Check Point is actively involved in education through its Infinity Platform Services. This includes providing a variety of training programmes and certification courses, incorporating interactive and gamified learning methods such as escape rooms and hacker hunts to make learning engaging and effective. These resources help organisations elevate their security teams to the next level of expertise.

Organisations facing technological challenges or skill gaps need to proactively update their strategies. Cyber criminals relentlessly exploit any weakness, making it crucial for companies to strengthen their defences and adapt to the evolving threat landscape.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Phishing attacks through SVG image files
Kaspersky News & Events Information Security
Kaspersky has detected a new trend: attackers are distributing phishing emails to individual and corporate users with attachments in SVG (Scalable Vector Graphics) files, a format commonly used for storing images.

Read more...
Amendments to the Private Security Industry Regulations
Technews Publishing Agriculture (Industry) News & Events Associations
SANSEA, SASA, National Security Forum, CEO, TAPSOSA, and LASA oppose recently published Amendments to the Private Security Industry Regulations regarding firearms.

Read more...
Crypto in SA: between progress and precaution
Information Security
“As cryptocurrency gains momentum and legitimacy, it’s becoming increasingly important for people to pay attention to financial security”, says Richard Frost, head of technology and innovation at Armata Cyber Security.

Read more...
Cyber recovery requires a different approach to disaster recovery
Information Security
Disaster recovery is about getting operations back on track after unexpected disruptions; cyber recovery, however, is about calculated actions by bad actors aiming to disrupt your business, steal sensitive data, or hold your system hostage.

Read more...
MDR users claim 97,5% less
Sophos Information Security
The average cyber insurance claim following a significant cyberattack is just $75 000 for MDR users, compared with $3 million for endpoint-only users, according to a new independent study.

Read more...
The impact of GenAI on cybersecurity
Sophos News & Events Information Security
Sophos survey finds that 89% of IT leaders worry GenAI flaws could negatively impact their organisation’s cybersecurity strategies, with 87% of respondents stating they were concerned about a resulting lack of cybersecurity accountability.

Read more...
Efficient, future-proof estate security and management
Technews Publishing ElementC Solutions Duxbury Networking Fang Fences & Guards Secutel Technologies OneSpace Technologies DeepAlert SMART Security Solutions Editor's Choice Information Security Security Services & Risk Management Residential Estate (Industry) AI & Data Analytics IoT & Automation
In February this year, SMART Security Solutions travelled to Cape Town to experience the unbelievable experience of a city where potholes are fixed, and traffic lights work; and to host the Cape Town SMART Estate Security Conference 2025.

Read more...
Kaspersky KATA 7.0 for targeted attack protection
Information Security Products & Solutions
] Kaspersky has announced a major update to its Kaspersky Anti Targeted Attack (KATA) including enhanced network detection and response (NDR) capabilities with deeper network visibility, internal threats detection and other critical security features.

Read more...
The role of advanced technologies in ransomware recovery
Information Security
As businesses increasingly adopt cloud technologies, the complexities of maintaining resilience and ensuring rapid recovery from such incidents become even more pronounced. The integration of advanced technologies is essential to navigate these challenges effectively.

Read more...