Facts about the Cybersecurity Industry: Exploring the application
In the ever-evolving cybersecurity landscape, staying informed with the latest statistics and trends is not just beneficial—it’s imperative. The year 2024 is shaping up to be pivotal, with threats becoming more sophisticated and industries worldwide grappling with a digital environment that’s more integral to operations than ever before.
In this detailed guide, we delve into the 101 Cybersecurity Statistics and Trends for 2024, offering a comprehensive snapshot to help professionals, businesses, and academics understand cybersecurity’s current state and future directions. From workforce dynamics to emerging threats, our analysis is tailored to provide actionable insights and practical advice for navigating this complex landscape.
Global Cybersecurity Workforce Hits 4.7 Million. Global Cybersecurity Workforce Hits 4.7 Million
The cybersecurity sector is witnessing significant growth, with the global workforce estimated at 4.7 million professionals. This number reflects the increasing importance of cybersecurity in today’s digital age, as organizations worldwide prioritize the protection of their information systems against cyber threats.
A Cyber Security Analyst safeguards an organization’s computer networks and systems. Their main duties include monitoring security access, performing security assessments through vulnerability testing and risk analysis, and implementing security measures to protect sensitive information. They are also responsible for responding to and mitigating the effects of cyberattacks, such as viruses, malware, and other security breaches.
Cybersecurity analysts play a crucial role in preventing data breaches and cyber threats, ensuring that an organization’s information remains secure and confidential. They stay updated on the latest cybersecurity trends and threats, continuously adapting their strategies to protect against potential security vulnerabilities. Their role is essential in maintaining the integrity and confidentiality of company data, making them a vital part of any organization’s security team.
Facts about the Cybersecurity Industry
The cybersecurity industry is a pivotal component of the modern digital landscape, marked by its dynamic growth and evolving challenges. In this section, we explore key statistics that shed light on the state of the industry, including workforce size, salary trends, and educational requirements, providing a foundational understanding of the sector’s current status and future outlook.
Only 4% of organizations feel confident in their security to “users of connected devices and related technologies are protected against cyberattacks.”1
The global cybersecurity workforce is estimated to be around 4.7 million people.2
Median pay for information security analysts was $102,600 annually in 2021.3
The lowest 10 percent earned less than $61,520, and the highest 10 percent earned more than $165,920.3
Chief information security officers made an average annual salary of $170,980 as of July 2022.4
Typical entry-level education is a bachelor’s degree.3
The expected growth rate for tech jobs is nearly twice the national rate for all jobs over the next 10 years.5
Information security analysts are projected to grow by 35% from 2021 to 2031, which is much faster than average.3
56,500 jobs are estimated to be added during 2021-2031.3
Cybersecurity Ventures projects there will be 3.5 million unfilled cybersecurity positions in 2025 globally.6
93% of organizations expect to increase cybersecurity spending over the next year.
Cybersecurity Threats
The threat landscape in cybersecurity is constantly changing, with new vulnerabilities emerging as quickly as old ones are mitigated. This section delves into the statistics surrounding the most prevalent cybersecurity threats of 2024, including cloud environment intrusions and the rise of malware-free attacks, offering a clear view of what organizations are up against.
Cloud environment intrusions increased by 75% over the past year.8
Cloud-conscious cases increased by 110% over the past year.8
There has been a 76% increase in victims named on eCrime leak sites.8
Malware-free activity (like phishing, social engineering, using trusted relationships, and other means) made up 75% of detected identity attacks in 2023.8
This is up from 62% in 2021, and 40% in 2019.
84% of cloud-conscious intrusions by adversaries were conducted by likely eCrime actors, compared to 16% conducted by targeted intrusion actors.8
In 2023, devices like edge gateway devices (equipment used to connect different networks together) were the most common way for attackers to first get into a network without being noticed.8
Generative AI will probably be used for cyber activities in 2024.8
Spam emails decreased 15% year-over-year.8
82% of chief information security officers (CISOs) would consider becoming a whistleblower if their organization was willfully ignoring security and compliance, thus putting the business at risk.7
84% of CISOs fear being personally liable for cybersecurity incidents.7
35% of CISOs are already using AI for security applications.7
61% will likely use AI in the next 12 months.
86% believe generative AI will alleviate security skills gaps and talent shortages.
39% of CISOs plan to train teams to better understand threats posed by generative AI.7
Just over a third (35%) of CISOs say their boards allocate adequate cybersecurity budgets.7
4 in 5 CISOs saw an increase in the number of threats as the economy declined.7
31% of CISOs report that projects have been delayed or removed due to lack of funding.7
Malware
In 2022, there were 5.4 billion malware attacks globally.9
4 in 10 malware attacks result in confidential data leakage.10
Over 70% of malware attacks go after a specific target.10
Threat actors carry out an average of 11.5 attacks per minute, according to Parachute.1
The vast majority (92%) of malware was delivered by email.1
In the first half of 2022, 2.8 billion malware attacks occurred.1
The VBA Trojan was the most common malware variant in 2022.1
Iran is the most-impacted country by mobile malware attacks.1
The most common malware type used on individual targets is spyware.9
The U.S. sees the most malware attacks annually (9 times more than #2, the UK).11
70% of organizations have users being served malware ads on their browsers
ransomware extortion totaled $176 million more than in all of 2022.12
Phishing is still the most common email attack method (39.6% of all email threats).12
96% of phishing attacks are delivered via email.9
30% of small businesses consider phishing attacks to be the biggest cyber threat.9
IBM reported in 2023 that phishing attacks cost businesses $4.9 million per attack. 1
In just November 2022, Google blocked over 231 billion spam and phishing emails.1
More 18-24-year-olds fell for phishing emails than other age groups in 2022.9
Business Email Compromise (BEC)
BEC accounts for 19% of data breaches.9
BEC attacks caused $1.8 billion in damages in 2021.9
In 2022, 34% of all attacks were launched as Business Email Compromise (BEC) attacks.1
Gift card requests are the most common way to retrieve funds from an attack (68% of attacks).9
52% of people fell for phishing links because they believed they were from a senior executive.9
29% of companies have lost a client in 2022 due to a business email compromise.9
Cybersecurity Degrees
Education plays a critical role in preparing the next generation of cybersecurity professionals. This section discusses the current trends and statistics surrounding cybersecurity education, from degree requirements to tuition costs, providing a clear picture of the academic landscape in this vital field.
Some workers enter the occupation with a high school diploma and relevant industry training and certifications 3
A bachelor of science (BS) in cybersecurity requires around 120 credits, which full-time learners can complete in four years.13
Public four-year universities charged their in-state students an average of $9,375 in tuition and fees for the 2020-21 academic year.13
Out-of-state students paid $32,825 for that same year.
Cybersecurity Demographics by Sex or Gender
Over 75% of bachelor’s degrees in cybersecurity and cyber/computer forensics are earned by males.14
24% of bachelor’s degrees in cybersecurity and cyber/computer forensics are earned by females.14
65.6% of master’s degrees in cybersecurity and cyber/computer forensics are earned by males.14
34.4% of master’s degrees in cybersecurity and cyber/computer forensics are earned by males.14
Cybersecurity Demographics by Race or Ethnicity 
Workplaces are quickly becoming more diverse.16
Minorities made up 19% of cybersecurity workers age 60+ who were surveyed, but made up 49% of all cybersecurity employees under 30.16
Women of color make up 22% of cybersecurity employees.16
Diversity lags at the leadership level: Less than 25% of executives identified as non-white.
cybersecurity sector is essential for professionals and employers alike. This section provides an overview of job availability, salary ranges, and employment trends, offering valuable insights for career planning and organizational development.
About 19,500 openings for information security analysts are projected each year, on average, over the decade.3
The number one priority for employers was prior hands-on cybersecurity experience.17
The largest employers of information security analysts were as follows3:
Computer systems design and related services – 27%
Finance and insurance – 15%
Information – 14%
Management of companies and enterprises – 8%
Administrative and support services – 5%
Most information security analysts work full time, and some work over 40 hours per week. Information security analysts sometimes may be on call after business hours in case of an emergency.3
59% of cybersecurity professionals cite “recruited by other companies” as their reason for leaving their current role.17
42% of respondents say their cybersecurity budgets are appropriately funded, the highest in 8 years.17
Cybersecurity workers report higher job satisfaction at companies that offer flexible working, mental health support programs, and employee feedback systems.16
The statistics and trends highlighted in this report paint a picture of a rapidly evolving cybersecurity landscape, marked by sophisticated threats, a growing skills gap, and significant opportunities for professionals. As we move further into 2024, it’s clear that staying informed and proactive in addressing cybersecurity challenges is more crucial than ever.
By understanding these key trends and statistics, individuals and organizations can better prepare to navigate the complexities of the digital age, safeguarding their information and systems against the ever-present threat of cybercrime.
Cybersecurity Statistics and TrendsDownload
Sources
https://www.getastra.com/blog/security-audit/cyber-security-statistics/
https://www.isc2.org/Research
https://www.bls.gov/ooh/computer-and-information-technology/information-security-analysts.htm
https://www.payscale.com/research/US/Job=Chief_Information_Security_Officer/Salary
https://www.cyberstates.org/index.html
https://cybersecurityventures.com/jobs/
https://www.splunk.com/en_us/campaigns/ciso-report.html
https://www.crowdstrike.com/en-us/
https://www.terranovasecurity.com/blog/cyber-security-statistics
https://www.ptsecurity.com/ww-en/analytics/cybersecurity-threatscape-2022-q2/
https://www.sonicwall.com/medialibrary/en/white-paper/2021-cyber-threat-report.pdf
https://www.cobalt.io/blog/cybersecurity-statistics-2024
https://nces.ed.gov/programs/digest/d21/tables/dt21_330.20.asp
https://nces.ed.gov/programs/digest/d21/tables/dt21_318.30.asp
https://www.zippia.com/cyber-security-analyst-jobs/demographics/
https://www.wtwco.com/en-us/insights/2022/06/2022-global-benefits-attitude-survey
