When it comes to the cybersecurity talent shortage, an already troublesome situation is getting worse: The shortage is expected to grow to 1.8 million employees by 2022, which is 20 percent greater than a forecast from 2015, according to the 2017 Global Information Security Workforce Study.

More than 19,600 cybersecurity professionals worldwide took part in the research, which was published by the Center for Cyber Safety and Education as partnered with Booz Allen Hamilton, Alta Associates, Frost & Sullivan and my company, (ISC)². Two-thirds of survey respondents indicated that they didn’t have enough information security workers in their department. When asked why this was the case, respondents cited a lack of qualified personnel (49%); a failure for leadership to understand cybersecurity requirements (42%); an inability for business conditions to support additional personnel (41%); difficulties of retaining security staffers (31%); and a lack of a clear career path for information security (31%).