How long does it take to develop cyber capabilities?

An Immersive Labs report uncovered the workforce cyber capabilities of cybersecurity, application security and crisis response teams.

Analysis of 35,000 cybersecurity team members inside 400 large organizations reveals it takes over three months (96 days) on average to develop the knowledge, skills and judgment to defend against breaking threats, except with Log4j. Infrastructure and transport are the two slowest sectors, taking an average of more than four months (137 days) to ensure skills development after a threat emerges.

The report underscores the need for organizations to have visibility of the cyber capabilities of their workforce.