The Loss of Skilled Personnel in Cybersecurity Teams is a Serious Concern

The Loss of Skilled Personnel in Cybersecurity Teams is a Serious Concern

Experts in cybersecurity believe that there is no room for trial and error in cybersecurity issues, as a single mistake could result in the destruction of a brand’s identity and the loss of important user data. The shortage of skilled personnel in cybersecurity teams is a serious issue.

In the fifth annual Boghdasht Security Event, a specialized panel discussed the topic of “Security Management Strategy in Holdings.”

Ismail Bagheri Asl, Chief Security Officer at Sadad Electronic Payment, stated, “Holdings can provide advisory support to their subsidiaries, but if the subsidiaries become sufficiently independent, it is better for them to operate independently in cybersecurity as well.”

Mohammad Ghanji, Head of Infrastructure and Security at Mamoot Digital, distinguished between cybersecurity in banking and industrial sectors, noting, “Centralizing security activities reduces mistakes and errors. Our preference at Mamoot Holding is to operate in a centralized manner.”

Milad Sajadi, Security Director at Bank Tejarat, explained the bank’s approach, saying, “We believe in the supervisory role of holdings. Now, Tafta serves as the IT arm of Bank Tejarat in this regard. Holdings should appear in a supervisory and strategic role.”

Costs Are Not Only Financial

Sajadi emphasized that security issues in banks are not just about financial costs. He explained, “If a security issue arises in a bank, it is not just about financial expenses. Security issues in banks, like many critical organizations, are no laughing matter and entail significant costs beyond reputational risks. While no penalties are currently in place in Iran for security breaches, advanced countries impose severe fines in this area. Security, like health, is often only appreciated when it becomes a problem.”

Sajadi further discussed the importance of human resources in security teams, noting, “No one pays attention to cybersecurity teams, but when a problem occurs, they are the first to be blamed. Requests and demands from security teams are often dismissed and seen as cost-generating.”

Bagheri Asl highlighted the importance of training in organizations, stating, “Security teams must also master soft skills to effectively persuade their managers of their rightful demands.”

Ganji agreed, stating, “Unfortunately, security managers and many IT professionals struggle with soft skills and persuading managers. This is a skill that everyone in this field needs to develop.”

Finally, Bagheri Asl addressed the challenge of skilled personnel and the migration of experts, saying, “In cybersecurity, we do not believe that failure is a path to success, as every failure could come at the cost of losing everything a brand has built.”

Ganji suggested that in the face of severe human resource shortages and the migration of skilled personnel, organizations should consider more cooperation in sharing personnel and knowledge to ensure greater security for both organizations and users.