Addressing the Growing Cybersecurity Threat: How Ramsey County can respond
September 27, 2024
The modern digital workplace facing businesses and employers has created increasingly sophisticated threats targeting businesses and communities. In the presentation titled "Top 10 Trends to Watch in Ramsey County’s Workforce Landscape”, Erin Olson, Senior Director of Strategic Research at RealTime Talent, underscored the pressing need for more robust cybersecurity measures. “The complexity and frequency of cyber threats are increasing at an unprecedented rate. Businesses need to be proactive, not reactive, in safeguarding their operations,” Olson emphasized.
Top cyber threats of 2024
A January 2024 Flashpoint report identifies the top cybersecurity threats currently bombarding businesses. These threats, driven by technological advancements and the growing sophistication of cybercriminals, necessitate immediate attention from both public and private sectors.
AI-driven
As artificial intelligence (AI) becomes increasingly integrated into business operations, it creates new avenues for cybercriminals. AI-driven attacks targeting critical business processes and customer data are projected to become more prevalent. Olson explained, “AI has the potential to enhance business operations significantly, but it also amplifies the complexity of cyber threats. Companies need to remain vigilant and invest in security measures focused on AI.”
Social engineering attacks
Social engineering has always posed a substantial cybersecurity challenge, but these attacks are becoming more targeted. Attackers are employing sophisticated techniques, often leveraging AI, to deceive individuals within organizations.
Supply chain and third-party vulnerabilities
As businesses increasingly rely on third-party vendors, supply chain attacks are rising. These vulnerabilities can disrupt operations and grant attackers access to broader networks. Recent high-profile breaches, such as those involving JumpCloud and Airbus, accentuate the critical need for comprehensive third-party risk management.
Ransomware and malware
Ransomware continues to pose a significant threat to global enterprises, with new variants emerging. Olson emphasized that the best defense against these attacks involves acknowledging the risk and developing thorough intelligence and response strategies to prevent ransomware from taking hold.
Minnesota's cybersecurity talent shortage
The significance these threats present to businesses has necessitated a growing demand for cybersecurity professionals. However, Minnesota faces a significant shortage of skilled talent in the Computer Science (CS) and Information Technology (IT) fields. "Minnesota ranks last in offering foundational Computer Science courses in high schools," Olson noted, "which is concerning given the rapid evolution of these threats."
Moreover, Minnesota has witnessed a decline in tech employment since 2018, falling six spots in net tech jobs. This talent gap is further compounded by the underrepresentation of women, Black, African American, Native American, and Hispanic/Latinx individuals in the tech workforce.
The CS/IT talent supply in Ramsey County needs to be bolstered. With 11,367 individuals employed in CS/IT roles and only 1.6% unemployed, companies struggle to find qualified local talent to meet increasing demand, which leads to more out-of-state hiring. Olson stressed the need for more inclusive recruitment strategies and skills-based hiring practices to help bridge this gap and renewed employer commitments to hiring locally.
Addressing the talent shortage
Several critical actions can be taken together by employers and educators to address talent availability. Increasing targeted secondary and postsecondary education training programs can expand the local CS/IT workforce with cybersecurity skills. Employing skills-based hiring practices can onboard talent expeditiously, especially given the limited number of graduates completing relevant programs.
An example of one such effort is the 2024 Tech Talent Conference on October 11th at the Best Buy headquarters in Richfield, MN. Arranged by the Minnesota Technology Association, the conference aims to help industry, workforce agencies, educational institutions and nonprofit representatives inspire, hire, develop and retain top tech talent.
Full Stack Saint Paul is another key initiative that seeks to address these challenges by fostering local tech talent. Launched as a partnership between the City of Saint Paul and private sector partners, Full Stack is dedicated to supporting and growing the technology sector in the region. The initiative is vital in cultivating a robust pool of cybersecurity professionals through job creation, workforce development programs, and partnerships with local educational institutions. Full Stack is helping the region stay ahead of the cybersecurity curve by highlighting the importance of public and private sector collaboration by building a more inclusive and diverse tech workforce.
Saint Paul’s Metro State University houses the MN Cyber Institute, a statewide initiative for cybersecurity education, research, and engagement. It includes the Cyber Clinic, made possible by a $1.45 million award from the National Security Agency to help Minnesota organizations respond to cyberattacks. Organizations access the clinic for free cybersecurity vulnerability assessments while students strengthen their academic expertise, developing a local talent pipeline. National attention is focused on the initiative, evidenced by Deputy National Cyber Director Harry Wingo’s recent tour of the Cyber Clinic to meet students and discuss workforce development.
The importance of local talent
Another major challenge Minnesota’s tech industry faces is the growing competition for remote talent. With the ability to hire tech professionals from anywhere globally, local businesses are feeling the strain on their workforce. Despite this, it's crucial for Minnesota businesses and employers to continue investing in local talent, whether their employees work remotely or in a hybrid model. Olson emphasized the importance of this point, stating, "Investing in local talent not only boosts the regional economy but also fosters long-term relationships and ensures a steady supply of skilled workers."
Ramsey County has the potential to secure its digital landscape as cyber threats become more advanced and frequent. Investing in both technology and talent will be crucial in fortifying local businesses and communities against the risks of 2024 and beyond.
The Top 10 Trends to Watch in Ramsey County’s Workforce Landscape from RealTime Talent is a compass guiding Ramsey County through the complexities of a transforming workforce. The trends identified pave the way for a resilient, innovative, and inclusive future. Each trend will be explored in depth throughout 2024, charting the course for Ramsey County's workforce in the coming years.