UK kicks off program to recruit security gurus

The U.K. is planning to hold computer security exercises later this year to spark interest in the field and address a shortage of professionals in the country, a program modeled after one started in the U.S.

The program, called the Cyber Security Challenge, was launched on Tuesday at the Infosec conference in London.

The exact format of the exercises hasn't been determined, but will likely focus on three main areas: network defense, forensics and Web application vulnerabilities, said Judy Baker, director of the consortium.

"It's set up actually to give us a richer and better pool of talented people for cybersecurity," said Baker, former deputy director of the U.K.'s National Infrastructure Security Co-organisation Centre.

Those targeted for the program will be 16 years and older, Baker said. The program is designed to counter a growing problem of a shortage of qualified professionals in computer security.

A study conducted by the SANS Institute, a U.S. computer security training organization, on behalf of the consortium found that 90 percent of 255 information security professionals interviewed said it was difficult to recruit cybersecurity candidates. About 60 percent of the respondents said they expect more security pros will be needed to address growing attacks.

The first exercise will likely be a remote exercise due to a high number of participants, Baker said. The second one will probably be face-to-face. The long-term goal is to introduce participants to employers with a need for their skills, she said. The competitions will likely begin in the fall.

"If we don't get the right people doing these jobs, we simply can't professionalize cybersecurity in a way that it's increasingly being recognized we need to," Baker said.

The Cyber Security Challenge is set up as a nonprofit and is supported by organizations such as the Institute of Information Security Professionals, the Information Assurance Advisory Council, the U.K. Cabinet Office, commercial vendors and others.

In July 2009, the U.S. started the U.S. Cyber Challenge consortium, which is composed of government and private organizations. It is intended to identify star high school and college students with talent in computer security and to offer scholarships, internships and jobs.