ISC2 estimated the global cybersecurity workforce at 5,452,732 in 2023, up 8.7% from the previous year. At the same time, its estimated workforce gap rose 12.6%, to 3,999,964. That gap is a modeled difference between the professionals organizations need and the professionals available for hire—not a count of nearly four million open jobs.
What did ISC2’s 2023 study find?
ISC2’s 2023 Cybersecurity Workforce Study estimated both the size of the global workforce and the gap between estimated need and available professionals:
| Measure | ISC2 estimate | Change from 2022 |
|---|---|---|
| Global cybersecurity workforce | 5,452,732 — ISC2, 2023 | Up 8.7% |
| Global cybersecurity workforce gap | 3,999,964 — ISC2, 2023 | Up 12.6% |
The workforce grew, but the estimated gap grew faster. That is the basis for the study’s conclusion that demand was outpacing supply. These are estimates for 2023, not a live count of 2026 workers or vacancies.
Does the gap mean there were four million open jobs?
No. ISC2 defines the workforce gap as the estimated number of cybersecurity professionals organizations need to secure themselves minus the professionals available for hire. The figure is a modeled measure of workforce need, not an estimate of job postings, funded positions, or current vacancies. ISC2 explicitly says the gap does not estimate the actual current cybersecurity job market.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →#1 Best Overall
That distinction matters because an organization can need more cybersecurity capacity without having the budget or approval to hire. ISC2 says economic uncertainty, hiring freezes, and layoffs do not reduce its estimate of how many professionals organizations require—even when employers cannot afford to recruit them.
How did ISC2 estimate the workforce and gap?
ISC2 and Forrester Research collected online survey responses in April and May 2023 from 14,865 people responsible for cybersecurity at their workplaces. Participants represented North America, Latin America, Asia-Pacific, and Europe, Africa, and the Middle East. ISC2 combined proprietary survey data with secondary sources to produce its estimates; the respondent count is not a direct census of cybersecurity workers or unfilled jobs.
Rank #2
What did professionals report about staffing and skills?
CyberScoop’s 2023 account of the ISC2 study reported that more than half of surveyed professionals said their organizations had a staff shortage, while more than 90% reported a skills gap. These are respondents’ reports about their own organizational conditions, not a census showing that the same shortages exist at every employer or in every country.
The same account said 47% of professionals had experienced cutbacks, including layoffs, budget cuts, or hiring or promotion freezes. That figure describes respondents’ reported experience; it should not be read as the share of all cybersecurity employers making cuts.
Free tools Windows power users keep installed
One-click scans. No signup required.
Where was the gap changing?
The study summary identified the greatest increases in estimated workforce gaps in Asia-Pacific and North America, while gaps shrank in parts of the Middle East and Latin America. Those broad regional findings do not establish a shortage in every country in those regions. The figures available in the study summary do not support a detailed country-by-country comparison.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the results mean for employers and workers
The 2023 estimates point to a mismatch between organizations’ assessed security needs and the professionals available to meet them. They do not show that every employer has approved openings, that every cybersecurity role is hard to fill, or that one credential or training program will close the global gap.
ISC2 CEO Clar Rosso framed the challenge this way: “While we celebrate the record number of new cybersecurity professionals entering the field, the pressing reality is that we must double this workforce to adequately protect organizations and their critical assets.” That statement reflects the scale of the need as ISC2 described it in 2023; it is not a forecast that the workforce will double by a particular date.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →
