How Women Will Solve Your Cybersecurity Problem

Leaders around the world are realizing the importance of cybersecurity for  building trust in a highly dynamic and competitive digital economy. Organizations of all sizes are gradually adopting security programs as a strategic component of business, for reasons that include enabling new revenue streams, safeguarding operational continuity, and meeting regulatory requirements. The good news is that we are witnessing progress and appreciation for information security; the bad news is that the number of cybercrime victims continue to rise, reaching all-time highs.

Corvus Insurance reports 2023 as a record-breaking year in ransomware victims (https://www.corvusinsurance.com/blog/q4-ransomware-report). 

Cybersecurity is a relatively young, under-developed field that faces a global skill shortage. Most security teams report that they are under tremendous pressure due to the lack of talent needed to run successful cyber operations and effective security processes. The unsustainable levels of stress from withstanding industrialized crime operations on a 24/7 basis eventually lead to high churn, which in turn leads to the reduced staff and the increased workloads that feed this vicious cycle. So, what can we do differently to solve the talent supply and address one of the main dilemmas in cybersecurity?

To address this predicament, let’s reflect on a key limitation we have unconsciously set for a prosperous security industry: gender diversity. By identifying myself as a man, I will put into practice Margaret Thatcher’s famous saying: “If you want anything said, ask a man. If you want anything done, ask a woman,” (Thatcher, 1965) and compile the perspective of 15 successful women working in cybersecurity. Through their eyes, I aim to uncover the realities behind a male-dominated field, the challenges that prevent women from entering or growing in this field and the opportunities businesses are missing due to underrepresentation.

Via interviews, I conducted a qualitative study that explores women’s representation in Latin America’s cybersecurity industry. All participants are notable leaders from different business units in this field and their experiences can help us identify patterns, biases and barriers from different angles. The end goal is to enable the full potential of your security strategy, by leveraging diversity and women empowerment.

Participants in the study distribution by role and tenure in cybersecurity.

What Attracts Women To Cybersecurity?

Innovation, growth and dynamism fuel the ambition of women joining the industry. Pushing the boundaries of technology and shaping the future were popular motivations behind the “creating impact” mindset of participants.

Women from non-technical backgrounds were encouraged by what can be achieved through interpersonal skills, while those with technical backgrounds were especially attracted to the natural convergence between networking, software development and cybersecurity. It was interesting to hear that women with proven track records in cybersecurity have inspired younger generations to join, confirming that female leaders are a much-needed role model for inclusion.

The Gender Gap Reality

Underrepresentation in the global workforce is a reality women have had to deal with historically. While there is a positive trend in labor force participation across many industries, cybersecurity continues to be among the sectors with the lowest women’s representation.

Interviewees from this study disclosed that women account for 30% of the cybersecurity workforce in Latin America. This is one of the most underrepresented industries, according to the latest Gender Gap report by the World Economic Forum. 

This disproportionate gender ratio only gets worse as we look into the share of women in senior leadership positions. On average, our interviewees disclosed that only 18% of leadership roles are held by women in their organization. Furthermore, they could only name one organization in Latin America with female representation on the executive board.

This phenomenon that keeps women from progressing beyond entry-level positions is referred to as the “Broken Rung.” Organizations that fail to address this issue are losing valuable talent and are damaging their reputation as employers.

Barriers Women Face in Cybersecurity

A recurring theme throughout the interview process was gender prejudice. All respondents have experienced discrimination from male peers presuming that women lack the necessary expertise to belong in this field. Either from conscious or unconscious bias, they are given fewer opportunities, their decisions are constantly questioned and their accomplishments are undervalued.

Other challenges frequently faced by interviewees were demeaning comments and microaggression. Asking a woman about their maternity plans during a hiring process or commenting on their emotional state during a discussion, are examples of non-acceptable behavior with negative side effects. Interviewees feel that men from this industry still expect a unique role played by female professionals, and this is a shadow that follows women along their career path and never seems to go away.

One of the most concerning issues expressed by respondents was harassment and how it is handled by organizations. Even though complaints are filed and action is sometimes taken, women have to deal with the negative effects of victimization and mental disorders. 

What Needs to Change

Our respondents emphasized the following:

1. The toxic “bro culture” that promotes discrimination needs to end. 
2. “Be a man and break the bro code.” Do not tolerate unacceptable behavior, be empathetic with female peers, build social structures that help protect women, support women in cybersecurity associations and stay loyal to the mission that drives our industry.
3. Awareness. For diversity to succeed in this industry men need to acknowledge that the problem is not fully understood and not enough action is being taken. 
4. “Change the perception of STEM careers and encourage female participation through programs that break down barriers to entry.” On the corporate side, DEI programs and unconscious bias training should be sponsored and overseen by the board.
5. Affirmative action policies need to be implemented in the cybersecurity industry. 
6. “Organizations need to see past social compliance and cultivate a culture that empowers women through wage parity and growth opportunities.” Women should be at the top of the list in every new hire or promotion process, as this provides the extra motivation that will help recruit new talent and close the participation gap in leadership roles. 

Why We Need Women In Cyber

A complex industry like cybersecurity cannot fully develop if half of the population is neglectfully left out. There is a notorious talent shortage and only through a diverse community will we be able to close the gap. Diversity can also drive productivity by bringing new perspectives and creativity to decision-making. Successful security strategies closely rely on collaboration and the open exchange of ideas, since this is how professionals can learn from each other and become more innovative. Bottom line: If you want to be better equipped to handle the wide variety of security challenges, you need diversity.

Women not only bring new perspectives to cyber operations, they also introduce several unique skills and attributes that can help your business keep up against today’s highly competent adversaries. Women are generally more detail-oriented and empathetic than men, helping ensure security processes are followed and vulnerabilities are addressed diligently. They also tend to be more risk-aware and strong communicators, making them ideal incident responders. 

Last but not least, women are highly committed and will not give up on your security vision. Navigating the high tide of a male-dominated industry makes them highly resilient, courageous and driven toward goals. Female security professionals have already proven their value by facing the extra challenges of an already challenging industry. Women empowerment in cybersecurity is a pressing matter that we should all turn to. We owe it to them as much as we owe it to honoring the pledge of keeping cyberspace safe.