Security departments can no longer count on increasing resources when organizations are stretched. Over the next few years, that stretch should become a little less. But will security feel it?

Security risks still have to be addressed but the expectation is that organizations will save money at the same time. That puts the focus on projects that reduce, for example, complexity and device proliferation in data centers, improve flexibility and support changes to business processes. Any investment in staffing or equipment needs a sound business case that demonstrated better risk management and bottom-line impact. Organisations now understand that security functions can deliver on this, so these expectations will be here to stay.

The poor economic conditions have also not made it any easier to recruit. There is still a skills shortage in the industry, particularly for technical specialists with a business perspective – in application security, for example. What has happened is that the number of companies looking to recruit has fallen, as has the number of people looking to move. Obtaining the budget may not get any easier, but at least recruitment should.

budgets, management, recruitment