Recruiting cybersecurity professionals is a major challenge because of the scarcity of qualified candidates, but at least employers don’t have to worry about them wanting to change professions. Most cybersecurity workers (64%) plan to finish out their careers in cybersecurity, according to (ISC)² research .

Of course, this creates a new challenge for employers – how to retain their cybersecurity staff. With a worldwide shortage of nearly 3 million , there’s always a chance workers will leave for better pay or more attractive working conditions.

To prevent this, employers must put serious effort into retention with measures such as robust training, professional development and open communication. The research shows that cybersecurity professionals want their opinions to be taken seriously when asked for input on cybersecurity matters. Employers that fall short in this respect may be sending their workers into the arms of another organization.

Another effective step aimed at retention involves cybersecurity certifications. Cybersecurity professionals view them as critical to their success, but the costs of taking courses and preparing for tests can be a big challenge.

Experience and Longevity

The finding regarding cybersecurity workers’ intentions to stay in the field came from (ISC)²’s most recent Cybersecurity Workforce Study , which polled 1660 cybersecurity and IT professionals. Professionals planning to remain in cybersecurity for the rest of their careers have worked in IT roles for an average of 11 years and cybersecurity roles for nearly seven years, the study found.

These respondents categorized themselves as cybersecurity professionals at a higher rate (37%) than the overall number of respondents (29%). The study found a link between experience and longevity: Respondents with greater experience in cybersecurity roles and initiatives are more likely to want to remain in the field.

The study also found that cybersecurity workers highly value relevant work experience. In fact, they consider relevant work experience as their top driver of success. That success, the findings suggest, plays a determinative role in wanting to remain employed as a cybersecurity professional.

The Role of Education

It should come as no surprise that education plays a big role in cybersecurity careers, considering the ongoing need to sharpen skills and learn new techniques. What is perhaps unexpected is the 71% of respondents who say they were already interested in cybersecurity careers during their education.

Historically, cybersecurity workers have started out in other career tracks, such as IT or communications, eventually making the switch because of the opportunity and earning potential.

Of the study participants who pursued a cybersecurity-focused education, 53% landed the first job of their career in the field. This compares to 35% of all the IT/cybersecurity professionals surveyed, and highlights the importance of cybersecurity certifications to complement a formal education in cybersecurity. These same respondents viewed cybersecurity certifications as the second most important qualification for cybersecurity professionals seeking employment (after relevant cybersecurity work experience).

According to the study, 42% of respondents planning to see out their careers in cybersecurity have a bachelor’s degree and 33% a master’s degree.