Cybersecurity professionals are in high demand all over the world today, but the talent pool is alarmingly small. Ying Tongtavorn, country manager for Thailand and Indochina with Palo Alto Networks, discussed the challenges and opportunities involved in filling these crucial roles in a recent interview.
There probably will be an increase in demand in Thailand for cybersecurity professionals. Who are the people who can fill these roles -- those with tertiary education in computer science only?
The shortage of cybersecurity talent is a global issue affecting all countries, not just Thailand. Current estimates indicate that by 2021 there could be 3.5 million unfilled cybersecurity jobs globally. To address the gap and build a steady stream of talent, we need to re-examine how talent is attracted and nurtured.
Yes, technical skills and certifications are the usual prerequisites, but as automation becomes more tightly integrated into the way we combat cyberthreats, we need more soft skills such as the ability to analyse data and draw insights, as well as business acumen and communication skills.
Hence, cybersecurity professionals will need to be strategic, creative, adaptable and possess leadership skills, beyond mere paper qualifications. This only makes it harder to find the right talent, so initiatives that help drive technical education and cybersecurity awareness will be critical in building a strong talent pipeline.
In Thailand, cybersecurity still focuses largely on securing the network. The need for end-to-end solutions that protect endpoint devices, the cloud, as well as the network, is not as well understood. The cybersecurity talent pool will need to develop to include specialists in a range of fields, such as the Internet of Things, artificial intelligence and data science.
More than 40,000 employees (primarily in low-level service jobs) will be laid off by the country's four major banks. Could they be trained for cybersecurity jobs? How long would that take?
Bank employees are likely to have a good awareness and understanding of cybersecurity, because of the way businesses have been transformed. They could continue to upgrade themselves by enrolling in technology courses. While training time would vary depending on the level of competence one aims to achieve, this hybrid background could give them an edge.
At a time when the financial sector is getting disrupted with the rise of fintech companies, this is an especially prudent time for bank workers to strengthen skill sets to make themselves more marketable.
Many people worry that digital transformation will destroy more jobs than it will create. What kinds of new cybersecurity roles will not be automated? What kinds of skills are needed?
The accessibility of technology has significantly lowered the cost of launching cyberattacks, and led to a rise of AI-powered threats. Automation has become a key prevention tool, helping to predict behaviours and execute protections faster.
Automation can also be deeply rooted in an integrated platform approach to cybersecurity, which can help companies and organisations collect data, analyse threats, manage routine tasks and even take action on known and unknown threats.
However, cybersecurity will always require human involvement, and automation is meant to augment the capabilities of existing teams, allowing them to focus on higher-order analytical, management and evaluation tasks.
As more machine learning and AI is incorporated into cybersecurity, so will the talent requirements change. More AI specialists will be required, and current team members will need to be upskilled.
What are the implications of digital transformation for the people living in thousands of villages across the country? What kinds of jobs will they be doing?
A resilient Thailand 4.0 requires an effective balance of people, process and technology elements. The plan by the Digital Economy and Society Ministry to equip people with basic ICT skills will help prepare them for the digital economy of the future. With these skills, they will be able to tap into the broadband network and access a diverse range of educational and employment opportunities, social media and e-commerce activities.
Today's economy requires workers to adopt a life-long approach to learning, and having fundamental ICT skills is a good stepping stone to more advanced skills and training in areas such as automation or cybersecurity.
Cybersecurity will be a major factor in the success of Thailand 4.0. While Thai people have embraced the internet, not many are aware of the risks going online can bring. This can be especially risky in a "mobile-first" country such as Thailand where 90% of internet users go online via mobile phones.
At Palo Alto Networks, we have observed that endpoints, such as mobile phones, ATMs and other connected devices, are rapidly becoming the primary targets of cyberattacks. Good cyber hygiene is thus everyone's responsibility.
In the context of most technology, there is productive talent (those who do research and advance the field), and then talent that is mainly concerned with implementing or maintaining the technology. Can productive talent can be developed in Thailand? Is it necessary to have it here, rather than in, say, Silicon Valley?
It would be great for Thailand to develop its own productive talent to remain resilient and future-proof. The Thailand 4.0 vision will require people to be innovators in their own right, tapping local knowledge and cultural nuances to embrace new technologies to propel the country towards more innovative, high-value industries.
To help develop cybersecurity talent and prepare for this transformation, Palo Alto Networks is working with Kasetsart University, Bangkok University and others to ensure the curricula are relevant in order to improve the capabilities of graduates to meet the demands of the market.
Do you think the talent here will work for Thai companies? Will the products and services they create be primarily destined for the Thai market?
Today's talent market has become global, so Thais can look at various opportunities at local and foreign companies in Thailand, as well as those abroad. Thai companies thus must demonstrate their own commitment to innovation to help attract and retain top local talent. A few locally born startups such as Zanroo and the online fashion retailer Pomelo have demonstrated this innovative spirit. As the pace of Thai innovation accelerates, we will start to see more companies export their technology and services, influencing more through disruption.
