We asked 135 managers and specialists in the Danish cybersecurity industry about their relationship with competency development. The results challenge a widely held assumption.
86% have participated in advanced training courses or education during their career, and the strongest driving force is the desire for new knowledge – not a requirement from the employer. So there is no lack of interest in professional development.
Yet, as ENISA and ISC2 have also pointed out, we are experiencing a growing skills gap in Europe. If the will is there, why are courses still being cancelled due to low enrolment?
Our data points to one explanation in particular: time. Lack of time is mentioned significantly more often than budget, management support or doubts about quality. In a day-to-day environment characterized by new threats, regulations and operational pressures, competence development is quickly pushed aside.
At the same time, the skills needed in the future are broader than technical. Both managers and specialists demand more strategic understanding, communication, business understanding and cross-functional collaboration – in line with ENISA's European Competency Framework.
And when the industry needs to learn, physical education and hands-on experience are clearly preferred over self-paced online courses. Learning is also about dialogue, sparring and experience with other professionals.
The conclusion is therefore not that the industry lacks the desire to learn. The challenge is to make skills development an integrated part of the work – not something that is only prioritized when things get less busy.
