"Speaking to Infosecurity at RSA Europe on 09 October 2012, John Colley - managing director of (ISC)2 EMEA – declared the skills gap in the information security industry a “big problem” and suggested that entrance into the industry for graduates is dangerously difficult.
'Evoking their interest is one issue', he said, 'but knowing what to do with them once they have shown interest and intent is an even bigger problem. There is no phase two.'
Information security departments are reluctant to take on trainees – even those with academic qualifications - because they need so much supervision at the beginning, said Colley. “Sometimes trainees have a negative impact on productivity.”