The need for gender diversity in cybersecurity is real

Share this post:

Author: Pelin Nancarrow, Consulting & System Integration Leader A/NZ

Pelin NancarrowI have been helping clients establish guidelines for implementing, maintaining and improving information security management in their organisations for 17 years.

Although it has improved, I am often still the only woman in the room. It is now more critical than ever for organizations to attract and retain women in cybersecurity, as the cybersecurity skills gap is ever-increasing.

A diverse cybersecurity team offers multiple perspectives, allowing businesses to stay one step ahead of attackers. If all the people on your security team think the same way, you’re missing out on the potential for problem-solving that a wider group of approaches and experiences would bring. Cybersecurity is not a narrowly defined field that can thrive with one skill. It needs diversity, especially when facing its wide array of challenges on a daily basis.

Forensic investigators and incident response personnel

As the Asia Pacific Lead for IBM’s X-Force Incident Response and Intelligence Services, I lead a team of forensic investigators and incident response personnel with experience on the front lines of some of the largest cyber-attacks in the AP region. Most of our success in our incident response was as a result of a diverse team where everyone brought their own unique strengths to the table. This included a deep technical understanding of networks and operating systems, how an attacker can traverse a network and obfuscate their movements and also strong coordination, stakeholder management and communication skills. There are several outstanding women on the team who are more able to convey complex technical concepts to business stakeholders, coordinate the response activity and manage stakeholders. In a crisis such as a major cyber-attack, all these skills are equally important to ensure that our clients can contain, remediate and recover from the attack in the fastest possible time.

Facing the ever-increasing challenges

AI and security software make us more productive and more effective, but ultimately it is the people behind the software who make critical security decisions. It’s people who work to detect intrusions, to block them, and then to clean up and restore operations. They’re the source of the operational resilience organisations need. It is not only reasonable but highly encouraged to plan for a diverse security team that will bring a wide array of skills to cybersecurity and better equip us to face the ever-increasing challenges coming our way.

More Security stories

The value of psychology and cognitive science in Cybersecurity

Author: Fiona Byrnes, AP Managed Security Services Delivery Executive, IBM Security Who is today’s cybercriminal? What new data can be commoditised or code weaponised for disruption? These are common security intelligence questions asked in our client conversations. While these questions are about the preventative tools, testing, analytics, and security methodology, they also have underlining psychology. […]

Continue reading

Cybersecurity needs your skills

Author: Holly Wright, QRadar Flows Product Owner, QFlow Software Engineer, IBM Security A little-known fact about cybersecurity is that it is one of the most diverse industries out there. Think of any company. You’d be hard-pressed to pick one that hasn’t gone through some sort of digital evolution, in some shape or form. Healthcare, finance, mining, […]

Continue reading

From stolen credentials to vulnerability exploits – are you ready to counter emerging threats?

Author: Stephen Burmester, Asia Pacific Regional Leader, X-Force Incident Response and Intelligence Services (IRIS), IBM Security The cyber threat landscape is constantly evolving. As countermeasures negate the effectiveness of one type of attack, malicious actors move to another threat vector. It can seem like an endless game of tit-for-tat, but by knowing what threats to […]

Continue reading