NRI Secure Technologies and LAC discuss cybersecurity talent development in an interview format, introducing approaches for connecting certifications and training with practical work. The discussion details the importance of defining the roles required by each organization and the differences between using CISSP and SANS.
As challenges in developing cybersecurity professionals, many companies cite not only a shortage of talent but also the difficulty of defining the specific roles for which people should be developed. Because the capabilities required differ depending on the organization, business, assets to be protected and whether work is performed in-house or outsourced, it is considered practical to provisionally define a starting point for development and validate it by combining education, placement and opportunities for practical experience.
Regarding the use of certifications and training, CISSP is said to help build a foundation of common language and decision-making, with continuing education described as a prerequisite. SANS, by contrast, comprises a diverse range of training programs that enable participants to explore specific areas in depth. The two should not be compared on an equal basis but used according to the purpose of learning.
To connect training and certification with organizational capabilities, it is considered effective to link learning with roles, practical work and opportunities to gain experience. Education and certifications can serve as a starting point for development, but the design of personnel placement, support structures and opportunities for practical experience is important, and an environment is needed in which acquired knowledge can be applied in practice.
Talent development is said to begin by organizing the questions involved. Organizations should provisionally define the roles required and the direction of growth, proceed from there, and continually review learning and support methods based on outcomes and responses. The interview reflects perspectives from both NRI Secure Technologies and LAC, and NRI Secure Technologies is introduced in the customer profile.