Upscale vs. Upskill: The Real Cybersecurity Gap
Innocent A. — Cybersecurity Analyst
Reshared from a post by Laurent H.
Upscale vs. Upskill: The Real Cybersecurity Gap
Cybersecurity presents a growing divide between two parallel forces: scaling technology and building capability. One is inevitable; the other is urgent.
Upscaling is constant, and that in itself is not the concern. Technology will continue to evolve. Artificial intelligence will embed itself across enterprise environments, new tools and platforms will emerge, and attack surfaces will expand regardless of organizational readiness. The real challenge lies on the upskilling side, where the gap is widening - often without immediate visibility.
Organizations face increasing pressure to integrate AI into products, operations and strategy. From boardroom discussions to digital transformation road maps, AI has become a default inclusion. This is largely driven by competitive pressure and the fear of falling behind. But in this acceleration, foundational security principles are being overlooked.
"Need to know" and "need to do" are two of the most fundamental principles of information security. Before deploying any system, you need to ask: who needs access, and what is the minimum level required to perform a function? These principles are not new, yet the urgency to adopt emerging technologies is eroding adherence to them.
The rapid adoption of generative AI illustrates this pattern. In many cases, deployment and experimentation have outpaced governance and risk evaluation. Data has been shared, tools have been integrated, and use cases have been explored without a clear understanding of data flows, storage, or exposure. Technology has moved ahead, while security considerations have followed behind.
This imbalance is reflected in industry data. According to Stanford's 2025 AI Index report, AI-related privacy and security incidents jumped by 56.4% in a single year, with 233 reported cases in 2024 alone. The trend highlights the consequences of innovation advancing faster than security preparedness.
At the same time, the narrative around cybersecurity talent requires closer examination. While the field continues to grow in popularity, with rising enrolments and certifications, the workforce gap has expanded to 4.8 million unfilled roles globally, reflecting a 19% year-on-year increase. More significantly, a 2025 SANS/GIAC Cybersecurity Workforce Research Report study found that 52% of cybersecurity leaders identify the core issue not as a shortage of people, but as a shortage of the right skills.
Organizations are filling roles, but not consistently building capability. The skills most in demand are increasingly non-technical: problem solving, communication, collaboration, willingness to learn and strategic thinking. Many professionals are technically proficient, yet struggle to contextualize risk, communicate effectively with business stakeholders, or influence decision-making. Execution without understanding remains a critical gap.
https://www.bankinfosecurity.com/blogs/upscale-vs-upskill-real-cybersecurity-gap-p-4119
0 reactions · 0 comments