A study conducted by security training company (ISC)2 revealed that most companies are not providing their IT professionals with the training they need to take on a more proactive cyber-security role.

From a sample of 3300 IT professionals being surveyed, only 35 % said their company requires IT staff to have an information security certification, while 63 % said their organization has too few information security staff, and 51% said their systems are less able than a year ago to handle a cyber-attack.