NCSC and KPMG release Decrypting Diversity report
KPMG and the NCSC yesterday released their first report looking at diversity and inclusion in the UK cyber security industry. A lack of diversity within the cyber security sector has long been seen as a challenge for the industry, inhibiting the exchange of ideas and Acting as a barrier to efforts trying to bridge the cyber skills gap.
This timely report will help industry understand where it is failing on diversity issues and what steps the sector must take together. Significantly, the report aims to create a benchmark for diversity and inclusion in the UK cyber security industry which will help the industry understand the areas in which it is making significant progress, and where additional attention is required.
Following the release of the report, the NCSC and KPMG will convene a series of industry-led working groups to take forward recommendations from the report and help to bring them to fruition. Going forward, these working groups will guide future variations of this report and will help to create a more diverse and inclusive cyber security sector.
The report finds that though the cyber sector has higher levels of LGBT and female representation than the wider technology industry, a number of communities reported higher levels of discrimination and lower confidence than the survey as a whole. These experiences suggest that the industry is suffering from a lack of diversity and this could lead to the loss of talent.
Some of the key statistics from the report include:
- 11% of respondents identified as LGB
- 31% of respondents identifying as female which is low relative to the population but higher than other technology industry surveys
- 13% of respondents identify as a minority ethnic group
- 1.3% of respondents identified as trans
- 17% of respondents were eligible for free school meals
- 72% of respondents feel confident being themselves in the workplace
- 16% of respondents experienced at least one negative incident in the last year
- 74% of those who experienced negative comments did not report anything
- 14% of respondents experienced barriers to career progression due to D&I issues
- 9% of all respondents considering leaving their employer or the industry.
These statistics show that there is still a long way to go to make the cyber industry the champion of diversity and inclusion that it should be. To rectify this, the Report sets out five recommendations:
- The industry must take an active role in leading on diversity and inclusion. The industry must work collaboratively to develop a clear vision for what diversity and inclusion practices cyber professionals should expect.
- Create from a more distributed workforce: Identify a set of principles for organisations to bake inclusivity into future ways of working with employees in more disparate physical locations.
- Use data to understand and track representation: The industry should leverage its expertise in data to establish best practice for measuring diversity and inclusion in organisations
- Create a Cyber D&I talent toolkit: The industry should build upon existing good practice both inside and outside the sector to produce a toolkit to help organisations map the talent lifecycle for their cyber employees and show how diversity and inclusion can be embedded at each stage
- Learn from D&I best practice: The industry must work will all stakeholders to share diversity and inclusion best practice across the industry to learn from each other as they each take their own steps to improve the experiences of cyber professionals
- Publicise the success stories: DCMS should use the UK Cyber Security Council once established to produce a set of case studies and career journeys that show the breadth of routes into cyber and the diversity of professionals in the industry today.
- Map out the roles and skills: DCMS should use the UK Cyber Security Council once established to produce cyber roles and the skills required in order to develop a framework to describe cyber roles and skills consistently.
techUK believes that this report and the subsequent recommendations are a welcome step, in a space where progress has simply been too slow in recent years. By setting a benchmark, the cyber sector will be more able to effectively assess its progress on diversity and inclusion issues and to figure out which policies are the most effective. techUK looks forward to supporting this progress, both through the proposed working groups and in the existing ongoing industry efforts .
Ciaran Martin, Chief Executive of the NCSC, yesterday said:
“It cannot be right that in the year 2020 there are still people within our industry who feel they can’t be themselves or who face discrimination because of who they are and this report should drive our determination to act.
“There is far more to do on diversity and inclusion and the NCSC is determined to be a leader in this field, but a cross sector effort is required to get this right.
“I urge all cyber security leaders to read the report and act on it.”
Bernard Brown, Partner and Vice Chair, KPMG UK, yesterday said:
“If the UK is to continue to play a leadership role in cyber security, we need to create an innovative and inclusive workplace that attracts the finest minds from our communities. Highly skilled cyber security specialists are an imperative in a rapidly expanding digital economy, supercharged by COVID-19.
“Our findings show that the cyber industry has a lot to do if it is to build truly inclusive workplaces. The report provides a route map for change and a call to action for a collective response to the issues raised.”
Jacqueline de Rojas, President, techUK, yesterday said:
“This report on diversity and inclusion in the UK’s Cyber Security industry couldn’t be more timely. Diversity in the sector is growing but this report sheds light on the discrimination still faced by marginalised groups in the workplace. For diversity efforts to be truly impactful, you must first build an inclusive culture for all. The creation of a benchmark will do more to highlight how we can ensure that everyone feels confident and safe at work, and is a fantastic step forward.
“The inclusion of diverse voices at every stage widens our perspective when operating under pressure. In difficult times, we see the heavy reliance on our scientists, technologists and engineers to come up with solutions, fast, to support the Cyber sector. We cannot do this successfully without diversity across the board.
“As we build towards the digital economy of the future, it is crucial that we foster diverse skills and talent to progress with adaptability rather than simply course-correcting from outdated recruitment and hiring practices.”
You can read the full report here.
Latest News from
DE&S launches new Strategy18/05/2021 11:25:00
The Ministry of Defence’s Defence, Equipment & Support (DE&S) organisation has launched a new strategy outlining its future ambitions out to 2025, with a specific focus on delivering through people, technology and innovation.
Powering prevention through collaboration & technology17/05/2021 16:25:00
Guest blog: Brendan Swarbrick, Executive Client Director – Ministry of Justice & Home Office at Sopra Steria as part of our #DigitalJustice2021 week.
Scaling and Accelerating AI - The Assurance Challenge17/05/2021 11:25:00
David Lawton, Technical Director, Informed Solutions discusses the challenge of assessing the fitness of systems that employ Machine Learning (ML) and Artificial Intelligence (AI) in highly complex and regulated industries. As part of AI Week 2021 #AIWeek2021.
The AI adoption paradox: can cautious adoption reap maximal benefits?14/05/2021 16:25:00
Joanna Crown, Product Strategist at Mind Foundry, describes how human-AI collaboration is the transformation needed for organisational success with AI. #AIWeek2021.
Foreign Secretary Dominic Raab at CyberUK 202114/05/2021 11:25:00
techUK has summarised the key points from Rt Hon Dominic Raab's speech at CyberUK 2021.
Delivering AI to Support Parkinson’s UK During the Coronavirus Pandemic14/05/2021 08:05:00
Parkinson’s UK is Europe’s leading Parkinson’s support and research charity. The organisation raises around £35m p.a. to drive better care, treatments and quality of life for those with Parkinson’s, their friends, family and their carers.
How AI is cleaning up our Oceans13/05/2021 16:25:00
AI has been at the heart of change for many industries. Right now, it is the responsibility of every industry to become more sustainable and AI technologies can help to do this.
Home Secretary announces Computer Misuse Act Review13/05/2021 13:33:00
Review into 31 year old legislation to start this year.
AI as co-creator: building better software and better businesses13/05/2021 12:33:00
Learn how computer vision and wider access to cloud-based AI capabilities is driving adoption at the most innovative companies. Guest Blog: Jaspar Casey, Product Marketing Manager at Eggplant.