By Garry Sidaway, Global Director Security Strategy at NTT Com Security
While we continue to adopt cloud enthusiastically, recent reports suggest that having the right set of skills is becoming a serious challenge for many organisations looking to maximise their presence in the cloud.
Industry analyst, IDC, reports that worldwide, 1.7 million cloud computing jobs weren’t filled last year because applicants lacked the necessary training and experience needed to work in cloud-enabled businesses. The firm predicts that the demand for skilled cloud professionals will grow by 26 per cent each year until 2015, creating as many as seven million cloud jobs globally.
So, it seems that skills are in short supply, just when they are needed most. But what kind of skills are companies embarking on cloud projects looking for? Can they develop and retain these skills in-house or will they need to look further afield?
A recent report looked at attitudes towards adopting cloud, and the levels of enthusiasm people have for this type of computing. It found that just 12 per cent of companies ranked ‘in-house skills’ as the most important factor when considering deploying a new application service, or changing an existing one. It seems that business agility, security and cost are all considered more important for many businesses.
UK companies also expressed concerns over data protection and regulation issues, with more than a quarter admitting they were the primary reason for slower adoption of the cloud. Companies are already delaying projects because of fears over security and compliance; it is now the biggest barrier for organisations moving to cloud.
While it’s clear that a good knowledge of information security should be at the top of our cloud skills wish list, businesses are still adopting old ways of thinking, and many organisations are prematurely making assumptions about the skills required to develop, design and deliver secure cloud services.
We all need to do our bit to help better educate end users and their teams. There is a real opportunity for cloud providers, the security sector, and the industry as a whole to demonstrate to customers the realities of security threats. Customers also need to be informed that security and risk management skills must be embedded into cloud projects from day one. But these aren’t skills that can be bolted on later; they must be addressed at the planning and development stages and carried through to the implementation and beyond.
Collaboration and agility are also essential skills for ensuring the cloud can provide a distinct advantage to organisations looking to win, grow and retain customers. An increasing digital economy means there’s a greater focus on having these skills, along with the ability to understand the risks to the business.
The question remains whether organisations are already planning ahead and looking to develop and nurture the right cloud skills by retraining existing staff, or bringing in specialists to help them maximise their investment in the cloud. It’s clear that a good knowledge and understanding of information security is fundamental for equipping organisations with the confidence to take full advantage of cloud technology.