Skip naar inhoud

Is tech team remuneration opening up a new form of cyber risk?

Wilt u deze bijdrage aanbevelen? Dat kan via:

Failing to reward cyber security staff in line with increases for other members of the tech team could open up new risks to organisations
It has always a difficult balance for any CTO to ensure that remuneration and reward are spread evenly and fairly across a tech team that encompasses many skills and roles. Every contribution is important and, through the pandemic especially, there are few areas of tech teams that haven’t been putting in long hours to keep organisations functioning and responding with agility and resilience to extremely challenging times.

One of the really key areas of the tech workforce is cybersecurity. About 40% of organisations have experienced an increase in cyberattacks during the pandemic due to the move to remote working, according to the most recent Harvey Nash/KPMG CIO survey. The peak of remote working may be about to come to an end – in the UK at least – but the more hybrid models that most businesses are likely to move to will also present plenty of opportunities for cyber criminals to try to exploit. The upward trend is almost certain to continue.

Couple that with the familiar picture of cyber skills shortages – cybersecurity is rated the most acute shortage area in the whole of tech – and, clearly, attracting and retaining cyber professionals must be among the top priorities of any tech leader.

Despite all these factors, businesses are running the risk of losing the cyber talent they have by failing to reward staff in line with other areas.

The 2021 Harvey Nash Tech salary & hot skills report, in which we conducted research among almost 6,000 technology professionals from around the world, including key markets such as the UK, the US, Australia and Germany, found that two-thirds (67%) of cyber professionals have seen their pay either decrease or stay the same during the pandemic. This compares poorly with many other tech roles.

Our data shows that organizations have instead chosen to focus on rewarding those roles that are related to releasing value and creating agility for the business. Therefore, the top three roles to experience pay rises have been development management/team leadership (59%), design/UX/UI (50%), and quality assurance (50%).

Those working as a CISO or security specialist, meanwhile, were ranked just joint 14th among technology roles worldwide receiving a pay rise in the past 12 months.

Attraction and retention challenge

Of course, it’s not that cyber professionals aren’t well rewarded. We found that the typical permanent salary in the UK for a cybersecurity expert is £75,000, and many well over £100,000, putting them joint fifth on the list of tech-related roles.
Nevertheless, if security professionals see others in the tech team receiving higher increases than them (and people do talk), there will be a demotivating effect. If reward increases don’t keep pace with other roles, the danger is that shortages and the war for talent will become even worse. It will become harder to attract and retain the talent needed as cyber professionals become less loyal, or even begin to specialise in other high-demand areas instead.
Clearly, rewarding staff involved in front-end activities that generate value and increase agility is critically important, but there is a balance to be struck. The signs are that reward strategies have tipped too far in one direction. This could open up a new kind of cyber risk as organisations struggle to attract and retain the security teams they rely on.
Cybersecurity has been a high priority for a number of years, and during that time, remuneration has generally reflected demand. But it seems that the recent crisis has broken that connection as organisations, understandably, have turned towards the customer. Now, though, as we move beyond the crisis, we need to turn back to investing in cybersecurity.
After all, no customer-facing investment will truly deliver value if it fails to deliver customer trust. As many organisations know, the moment their systems are compromised or customer data is breached, trust evaporates quickly and is very hard to rebuild. One saying I often return to is: “Reputation arrives at foot and leaves in a Ferrari.” For me, this really sums it up. Reputation is hard-won and takes time. But the minute trust is broken, it shoots off into the distance.

Getting the balance right

There is no magic solution here – CTOs have finite budgets and can’t hand out generous pay rises to everybody in the entire team every year. They also need to be wary of price escalation – creating a salary war that becomes unaffordable.
Therefore, it comes down to that question of balance, looking across the tech team and thinking about the total mix. It’s also about evaluating the whole reward package, not just headline salaries. Many individuals value additional benefits (pension contributions, health cover, gym memberships, and so on) very highly, as well as flexible working and lifestyle arrangements, and are willing to sacrifice some salary in return. So tech leaders need to bring that lens to the issue as well.
The signs are that reward strategies may have got a little out of kilter – but good CTOs working closely with their HR teams should be able to find ways of putting it back into balance again.

Lees ook:

Na sase komt sse (security service edge)

Security service edge (sse) is de evolutie van het sase-framework van Gartner. Door de letter ‘A’ (voor ’access) te verwijderen, wordt duidelijk dat het netwerk niet langer wordt beschouwd als onderdeel van een beveiligingsoplossing. Het is slechts het mechanisme dat de datastromen naar het security- en controleplatform transporteert.

UK tech has 2.8% gender ‘wage gap’, says Hired

The wage offered to women for tech jobs in the UK is 2.8% less than offered to male counterparts – a larger gap than in the US and Canada, says Hired

HPE bouwt eerste Europese supercomputerfabriek

Hewlett Packard Enterprise (HPE) zet in Tsjechië zijn eerste Europese productielijn voor supercomputers en ai-systemen neer. Elders in de wereld heeft het techbedrijf al drie van zulke fabrieken. De Tsjechische locatie moet de levering aan Europese klanten versnellen en het regionale netwerk van toeleveranciers versterken. Volgens het concern loopt Europa voorop bij de inzet van supercomputers en artificiële intelligentie (ai).

Government won’t regulate on professional cyber standards

The government has elected not to proceed with regulatory intervention to embed standards and pathways across the cyber profession

Slimmer datagebruik leidt tot forse efficiency

Bedrijven kunnen zeker tien procent efficiënter werken door slimmer gebruik te maken van de aanwezige informatie in digitale bedrijfsprocessen. ‘Er zit nog veel onbenut potentieel in de informatie uit de systemen’, zegt Remco Dijkman, professor in Information Systems aan de TU Eindhoven. Hij noemt het percentage een voorzichtige inschatting.

EasyComp Zeeland opent nieuwe online megastore EasyComp Shop.

EasyComp Zeeland, een toonaangevende leverancier van allerlei IT en ICT-dienstverlening, heeft vandaag haar nieuwe online megastore EasyComp Shop geopend. Deze one-stop-shop biedt een uitgebreid assortiment producten van wereldberoemde merken tegen scherpe prijzen. Of u nu op zoek bent naar een nieuwe laptop, tablet of smartphone, in de EasyComp Shop vindt u altijd wat u zoekt.

Wilt u deze bijdrage aanbevelen? Dat kan via:

Klaar voor de beste oplossing voor uw IT & ICT-situatie?

Ik heb mijn wachtwoord gewijzigd in “onjuist.” Dus wanneer ik vergeet wat het is, zal de computer zeggen: “Uw wachtwoord is onjuist.”