Requirements for a Career in Information Security: A Comprehensive Review

Mike Nkongolo,Nita Mennega,Izaan van Zyl

DOI: https://doi.org/10.1007/978-981-99-7962-2_7

2024-01-08

Abstract:This research paper adopts a methodology by conducting a thorough literature review to uncover the essential prerequisites for achieving a prosperous career in the field of Information Security (IS). The primary objective is to increase public awareness regarding the diverse opportunities available in the Information Security (IS) field. The initial search involved scouring four prominent academic databases using the specific keywords "cybersecurity" and "skills," resulting in the identification of a substantial corpus of 1,520 articles. After applying rigorous screening criteria, a refined set of 31 relevant papers was selected for further analysis. Thematic analysis was conducted on these studies to identify and delineate the crucial knowledge and skills that an IS professional should possess. The research findings emphasize the significant time investment required for individuals to acquire the necessary technical proficiency in the cybersecurity domain. Furthermore, the study recognizes the existence of gender-related obstacles for women pursuing cybersecurity careers due to the field's unique requirements. It suggests that females can potentially overcome these barriers by initially entering the profession at lower levels and subsequently advancing based on individual circumstances.

Computers and Society

What problem does this paper attempt to address?

The main objective of this paper is to reveal the key prerequisites needed for engaging in the field of Information Security (IS) through a literature review, in order to raise public awareness of the diverse opportunities in the information security field. Specifically, the paper attempts to address the following issues:

1. **Identifying the skill requirements in the field of information security**: Through a systematic literature review, the core knowledge and skills that information security professionals should possess are identified, emphasizing the importance of technical capabilities, including troubleshooting skills and familiarity with vendor products.

2. **Analyzing the challenges faced by women in the field of information security**: The study points out gender-related barriers that women face when entering the field of information security and suggests ways to overcome these obstacles, such as starting from lower-level positions and gradually advancing based on personal circumstances.

3. **Exploring information security training and awareness enhancement**: The paper also discusses the potential of various forms of training programs (such as paper-based materials, interactive games, simulation training, and video training) to bridge the skills gap, and proposes innovative methods for developing information security awareness games.

4. **Evaluating trends in information security-related research**: By analyzing the trends in information security research publications over the past several years, the paper demonstrates the growing interest in this field and the shifts in research focus.

In summary, this paper aims to provide a comprehensive understanding of the knowledge, skills, and qualities required for a career in information security, with a particular focus on how to attract more women to this industry, thereby promoting diversity and inclusion.