Page 10 - Security Today, March/April 2023

Houston,
We Have a Problem
By Connie Moorhead
Between turnover rates soaring as high as 300%, some places and every security executive worth their weight, is finding and retaining top talent as one of their biggest future concerns – the security industry is standing at the precipice, and we must make a decision. Recognize the mission-critical importance that education and certification plays, or plan on continual and pro- gressively worse problems.
Look at this under a very real lens. Cyberattacks against man- ufacturers are complicated, and enabled primarily by the move to internet-enabled technologies. More and more security manu- facturers are building devices by onboarding crucial cyber secu- rity features. The integrator, however, may be unaware of how to harden the device.
At the same time, end users are assessing their vendors (i.e., integrators) more stringently. They expect integrators to have the necessary on-the-job expertise. That includes education and cer- tifications.
In some cases, the integrator may not be allowed to bid on a job unless they have the required certifications outlined in a spec. Education and certification for these integrators are immensely important. They prove that the integrator is prepared to install their products across multiple disciplines better and allows them to promote their companies better.
The reality is, for the security space to continue and grow at current the pace, and for the next generation of security integra- tors to keep their skills sharp, there will need to be a culture shift across the entire industry.
Antoinette King, founder of Credo Cyber Consulting LLC said, “We need to have a fundamental shift in our industry. We have to evolve. Security must collaborate with IT and cyber to work together. If not, we are promoting silos. These silos put the end user more at risk.”
However, if you have questions about certifications in the se- curity world, you are not alone. Moreover, it is no wonder: the way this term is used can vary, and requirements might differ from one organization, or state, or even job, to another.
Professional certification is a credential that verifies someone’s knowledge, skills, and abilities to perform a specific job. Typically, you earn these credentials after you have completed your educa- tion. A professional association typically awards certification af- ter a candidate completes an assessment. Sometimes, you become certified after you have gained a certain amount of experience, such as through time on-the-job or practical field application.
Do not conflate education offerings or certificate programs with certifications. They are very different but often work hand in hand. While both equip security specialists to work in the field, the education program will result in a certificate. A typical cer- tification program requires participants to find their education elsewhere and assesses their skills and knowledge gained through
training. The certification then becomes the industry standard for exam requirements. Earning the certification involves meet- ing these standards by passing an exam. The credential is usually valid for a limited term and renews periodically. The renewal will require proof of skills advancements, such as through continuing education or evidence of advanced work.
There is an exception to this rule, which is with manufacturer certifications. Often, the manufacturer is providing the training and the testing portion of the process. And, for good reason. From a manufacturer’s standpoint, the education provided and certification required from integrators insures products are being applied, in- stalled and maintained effectively. That also allows the manufactur- er to have more control over the messaging about their own prod- ucts. Cindy Mitchell, AVP Training & Education with dormakaba told me “In the future we envision the certification process will be more intensive – especially with integrators.” Mitchell is a firm be- liever that product certifications are vital. “At the end of the day, it is our name on the line if the product is not installed right,” she said.
You cannot pick up a magazine, get an eNewsletter, or attend a trade show these days without hearing some kind of prognosti- cation on the future of the security industry. However, while these trend analysts are on point in identifying the cloud, IoT, and smart devices as the hottest trends of the near term, many fail to grasp the importance of education and, with it, certification programs. These programs are even more important because the new generation of worker wants opportunity and professional development. Even above higher wages and benefits, they want to know they have a path to growth within the organization. In fact, nearly 6 in 10 people say they are likely to leave their company without being offered professional development and career train- ing to develop new skills and drive career advancement. This dy- namic is especially true among Millennials and Gen Z-ers. Hence, the constant churn of human capital.
Smart companies understand all too well the benefits associ- ated with the education and development of company employ- ees. Briefly, strengthening employee skills reduces weak links, improves productivity, and is extremely influential on innovation.
Companies that are not so smart focus on the costs associated with employee education. They cannot see beyond that, perceiv- ing it as a drain to the business, and not a wise investment. All too often businesses do not make training and development a priority. Nevertheless, when it comes to the bottom line, the ROI of a robust education program beats the cost savings of training cutbacks easily. As the old saying goes, do not worry about the employee who is trained and leaves your com-
pany. Rather, worry about the employee that is
untrained and stays.
Connie Moorhead is the president of the CMOOR Group.
10
MARCH/APRIL 2023 | SECURITY TODAY
SECURITY EDUCATION