Integration of Neurodiverse Talent to Solve the Cybersecurity Skills Shortage: An Untapped Holdings' Approach
By: Dr. Raza Nowrozy, Senior Director – Cyber Security
The cybersecurity industry faces a persistent and growing skills gap, with both industry and government sectors struggling to recruit the talent necessary to combat increasingly sophisticated cyber threats. Untapped Holdings has developed an innovative solution through the integration of neurodiverse talent, particularly individuals with autism and ADHD, into critical cybersecurity roles. By leveraging the unique cognitive strengths of neurodiverse professionals such as pattern recognition, attention to detail, and problem-solving abilities we address the workforce shortage while enhancing the effectiveness of cybersecurity operations. This article explores Untappd’s neurodiverse centric approach, the success of its tailored training programs, and its collaboration with industry leaders in finance, government, and mining. Additionally, it discusses the role of Work Development Consultants (WDCs) in providing workplace accommodations to support neurodiverse employees, and the long-term potential of expanding this model to other sectors to foster a more resilient and inclusive cybersecurity workforce.
Neurodiverse centric approach to solving the cybersecurity skills gap
At Untapped Holdings, we have developed a neurodiverse centric approach to solving the cybersecurity skills gap. This strategy combines traditional cybersecurity expertise with the distinct capabilities of neurodiverse professionals, particularly those with autism and ADHD. These individuals often exhibit cognitive strengths such as superior pattern recognition, keen attention to detail, and the ability to maintain high levels of sustained focus, making them ideally suited for critical cybersecurity roles.
Our recruitment and training process goes beyond standard practices; we provide tailored training programs designed specifically to develop the cybersecurity skills required for neurodiverse individuals to excel. These programs focus on areas such as threat detection, vulnerability assessments, risk management, and incident response, equipping neurodiverse employees with the technical competencies necessary for specialised cybersecurity roles. Additionally, Untapped Holdings provides opportunities and support for industry-recognised certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), and Certified Ethical Hacker (CEH), which not only enhance their skill sets but also increase their employability within the industry.
Further, we offer continuous support through Work Development Consultants (WDCs), who ensure that neurodiverse employees receive the necessary workplace accommodations from adapted communication methods to flexible environments so they can thrive and deliver exceptional results in their roles. This combination of targeted training and ongoing support allows neurodiverse individuals to meet the evolving demands of the cybersecurity landscape while significantly contributing to the resilience of cybersecurity operations across industries.
The Global Cybersecurity Workforce Shortage
The shortage of skilled professionals in cybersecurity is reaching critical levels globally. Recent studies reveal that the gap in the availability of qualified cybersecurity professionals has increased by 25% in recent years, leaving organizations across industries and particularly those in critical infrastructure and government sectors highly vulnerable to cyber-attacks. This shortage exposes key sectors such as financial services, healthcare, and government operations to significant risks from state and non-state actors targeting their systems [1].
In Australia, the situation is particularly concerning, with sustained cyber-attacks targeting both government and private institutions. The financial losses resulting from data breaches can vary significantly depending on the scale and impact of the breach. Smaller incidents may incur costs of $1.5 million to $2 million per breach, typically involving less critical data or affecting smaller organizations. However, larger breaches, especially in highly regulated sectors like healthcare or finance, can be far more costly. According to IBM's 2023 Cost of a Data Breach Report [11], the global average cost of a data breach is $4.45 million, with sectors such as healthcare experiencing even higher averages, reaching $10.93 million per incident [11].
Beyond the financial losses, breaches also cause significant reputational damage and operational disruptions. Given these high stakes, traditional approaches to cybersecurity recruitment which have failed to keep pace with the growing demand for skilled professionals are proving insufficient. A more inclusive and innovative strategy, such as that offered by Untapped Holdings, is necessary to address this escalating crisis.
Untapped Holdings’ Neurodiverse Centric Approach
At Untapped Holdings, we have developed a neurodiverse-centric approach to solving the cybersecurity skills gap. This strategy combines traditional cybersecurity expertise with the distinct capabilities of neurodiverse professionals, particularly those with autism and ADHD. These individuals often exhibit cognitive strengths such as superior pattern recognition, keen attention to detail, and the ability to maintain prominent levels of sustained focus making them ideally suited for critical cybersecurity roles.
Untapped Holdings has been a leader in this domain, actively recruiting, training, and placing neurodiverse individuals into pivotal cybersecurity positions across both private industry and government sectors. Our recruitment process goes beyond standard practices; we provide tailored training programs that not only teach the required cybersecurity skills but also accommodate the diverse learning needs of neurodiverse individuals. Moreover, we offer continuous support through Work Development Consultants (WDCs), who ensure that neurodiverse employees receive the necessary workplace accommodations from adapted communication methods to flexible environments so they can thrive and deliver exceptional results in their roles.
Neurodiverse Strengths in Key Cybersecurity Domains
Neurodiverse individuals bring distinct advantages to cybersecurity, particularly in roles that require high precision, analytical thinking, and problem solving. These traits are particularly valuable in areas such as:
· Information Security Governance
Neurodiverse individuals are ideally suited for tasks that involve establishing and managing security strategies and governance models. Their methodical nature ensures that security policies, procedures, and standards are not only rigorously developed but also aligned with an organization's overall business goals and objectives. Their prominent level of focus on details helps ensure compliance with industry regulations and evolving cybersecurity frameworks. Neurodiverse professionals are also capable of keeping governance models adaptable to changing threat landscapes, offering long-term sustainability and resilience.
· Information Risk Management
In Information Risk Management, neurodiverse talent excels in identifying, assessing, and managing risks associated with cybersecurity. Their ability to detect subtle patterns and anomalies allows them to perform highly effective risk assessments. They are adept at developing risk management strategies that proactively address potential threats while implementing risk mitigation measures to protect sensitive data. Their attention to detail ensures that they can continuously monitor and report on risk levels and the effectiveness of controls, thus ensuring a comprehensive risk management strategy.
· Information Security Program Development and Management
When it comes to Information Security Program Development and Management, neurodiverse individuals bring a level of precision that is crucial for designing, developing, and managing security programs aimed at protecting organizational assets. Their capacity for understanding complex systems and frameworks ensures that the security program remains aligned with laws, regulations, and organizational policies. Furthermore, neurodiverse employees often excel in overseeing security awareness programs, ensuring that the organization fosters a security-conscious culture and maintains continuous improvement in its security practices.
· Incident Management and Response
Incident Management and Response requires quick, methodical thinking and the ability to remain calm under pressure. Neurodiverse individuals, particularly those with autism, are known for their ability to maintain composure in high-stress situations. Their meticulous approach allows them to establish and manage incident response plans effectively, ensuring that incidents are detected and addressed in a timely manner. Their focus on process makes them invaluable in coordinating with Security Operations Centres (SOCs) and other teams to ensure that incidents are resolved efficiently, thus minimizing damage and downtime.
Untappd’s Role in Addressing Workforce Limitations
While neurodiverse individuals bring unique strengths to the table, there are challenges that must be addressed to ensure their success in the workplace. Many neurodiverse employees face difficulties in environments that do not cater to their sensory sensitivities or communication preferences. Traditional workspaces can sometimes present barriers that limit their full potential. Untapped Holdings addresses these challenges through Workplace Development Consultants (WDCs) who work with organizations to create workplace accommodations that support neurodiverse employees.
These accommodations can include:
· Flexible work environments, such as quiet spaces or options for remote work.
· Alternative communication methods, such as written instructions or visual aids, to accommodate different learning and communication styles.
· Tailored onboarding processes that allow neurodiverse employees to integrate into teams at their own pace [7].
Success Stories: Transforming the Cybersecurity Workforce
Several organizations across various sectors have already reaped the benefits of Untapped Holdings' hybrid approach to integrating neurodiverse talent into their cybersecurity teams. By aligning the unique strengths of neurodiverse individuals, including those with autism and ADHD, with the specific needs of industries such as finance, government, and mining, Untapped Talent team has helped organizations significantly enhance their security posture.
For instance, we partnered with a leading Australian financial institution to place neurodiverse employees in critical cybersecurity roles. These individuals demonstrated exceptional capabilities in identifying previously overlooked vulnerabilities, which significantly bolstered the organization’s ability to defend against increasingly sophisticated cyber threats. The success of this initiative highlights the critical role that neurodiverse professionals can play in the financial sector, where precision and attention to detail are essential for maintaining data integrity and protecting against financial fraud and cyber-attacks [1,2].
Furthermore, we have successfully collaborated with government agencies, where trainees’ neurodiverse talent has been instrumental in addressing national security challenges. In these highly regulated environments, neurodiverse employees have excelled in roles involving information risk management, incident response, and the protection of sensitive government data. Their contributions have not only strengthened government agencies' ability to safeguard critical infrastructure but also helped to mitigate risks associated with cyber espionage and state-sponsored attacks [3,4].
In the mining sector, where the need for operational security (SOC) protection of information assets is the principal, Untapped Talent team has worked with organizations to integrate neurodiverse individuals into cybersecurity teams focused on safeguarding operational technologies (SOC). These trainees will be tomorrow’s professionals who can bring exceptional analytical skills and a meticulous approach to detecting vulnerabilities in industrial networks, helping mining companies protect against increasingly targeted cyber-attacks that could disrupt production and operations [5,6].
Through these successful partnerships, Untapped Holdings has also worked closely with Work Development Consultants (WDCs) to provide ongoing workplace support and ensure that neurodiverse employees thrive in their roles. The tailored training programs and customized workplace accommodations offered by us have been critical in helping organizations fully leverage the potential of neurodiverse talent. In addition to improving cybersecurity operations, our approach has contributed to fostering a more inclusive workplace culture that values diversity and innovation [7,8].
As Untapped continues to expand its collaboration across sectors, including government, finance, and mining, the demonstrated success of its hybrid approach reinforces the value of neurodiverse individuals in tackling the global cybersecurity skills shortage. By placing neurodiverse professionals in roles where their unique cognitive abilities can shine, Untapped Talent team is driving transformative change in how organizations approach cybersecurity, ensuring a more resilient and secure future [9,10].
The Path Forward: Expanding Neurodiverse Talent in Cybersecurity
To truly leverage the potential of neurodiverse individuals in cybersecurity, it is critical that organizations adopt more inclusive recruitment strategies and implement workplace practices that enable these individuals to thrive. Untapped Holdings is committed to broadening its hybrid model, ensuring that neurodiverse talent is fully integrated into cybersecurity teams across various industries. By doing so, our aims to build a cybersecurity workforce that is not only more diverse and inclusive but also more effective at addressing the complex challenges posed by cyber threats.
Our ongoing initiatives, such as the Genius Armoury and Genius Armoury for High schoolers, continue to highlight the considerable potential that neurodiverse individuals bring to the cybersecurity domain. These programs highlight how tapping into neurodiverse talent can address not only the skills gap but also contribute to the broader goal of enhancing cybersecurity practices on a global scale. As we expand these efforts, it will play a key role in helping organizations develop resilient and adaptive security frameworks that can respond to the ever-evolving threat landscape. By championing inclusivity and diversity, Untapped Talent program is shaping the future of cybersecurity through innovation and collaboration.
Limitations and Future Considerations
Although Untapped Holdings' approach to integrating neurodiverse individuals into cybersecurity roles has shown significant promise, there are challenges that must be addressed to ensure long-term success. The provision of workplace accommodations and continuous support through Work Development Consultants (WDCs) remains essential for neurodiverse employees to thrive. These accommodations may include adjusted communication methods, flexible workspaces, and tailored workflows that cater to the unique needs of neurodiverse individuals.
Moreover, while our training programs are effective, there is a growing need for tailored cybersecurity training programs that are specifically designed to support neurodiverse professionals. As the cybersecurity landscape continues to evolve with new threats and technological advancements, these programs must ensure that neurodiverse individuals' skills are continuously developed and refined. This involves creating adaptive learning environments that address both technical skill development and the unique ways in which neurodiverse professionals learn and process information.
Additional research and investment into these bespoke training initiatives will help bridge gaps in the current understanding of neurodiverse employees’ needs, ensuring that they remain competitive and adaptable as cybersecurity threats evolve. By addressing these limitations, we can continue to lead the way in creating a diverse, skilled, and resilient cybersecurity workforce that meets the dynamic demands of the industry.
A Collaborative Solution to the Cybersecurity Skills Gap
The persistent and growing cybersecurity skills gap poses a significant risk to both industry and government sectors, demanding more than traditional hiring practices can offer. Untapped Holdings has developed a novel and forward-thinking hybrid approach that effectively integrates neurodiverse talent into critical cybersecurity roles. This strategy not only addresses the acute skills shortage but also capitalizes on the unique cognitive strengths of neurodiverse individuals, including those with autism and ADHD. Their abilities, such as enhanced pattern recognition, attention to detail, and methodical problem-solving, are proving invaluable in safeguarding systems against increasingly complex cyber threats.
Central to Untapped's success is the organization’s commitment to ensuring that neurodiverse professionals thrive in their roles. This is achieved by providing tailored workplace accommodations and ongoing support through Work Development Consultants (WDCs). These consultants help create environments where neurodiverse employees can excel, ensuring their full integration into cybersecurity teams and maximizing their contributions.
Untapped Holdings has forged partnerships with industry leaders and government agencies, positioning itself as a key player in driving innovation and diversity in cybersecurity. Through these collaborations, we are not only helping to close the cybersecurity skills gap but also fostering a more resilient and inclusive digital workforce. This approach paves the way for a future in which organizations are better equipped to face the dynamic challenges of cybersecurity, enhancing their defence capabilities and securing critical infrastructure.
References:
Wiederhold, B.K. (2024). Diverse Minds, Secure Networks: Embracing Neurodiversity in Cybersecurity. Cybersecurity Journal.
Scanlan, J., Eddy, A., Thomas, T., Tan, T., Chen, Y.P., Watters, P., Fieldhouse, M., & Fung, L. (2020). Neurodiverse Knowledge, Skills and Ability Assessment for Cyber Security. Australasian Conference on Information Systems.
RAND Corporation. (2023). Neurodiversity and National Security: How to Tackle National Security Challenges with a Wider Range of Cognitive Talents. RAND Report.
Patel, V. (2012). A Practical Solution to Improve Cyber Security on a Global Scale. IEEE SecurITism Conference.
Payne, K., Russell, A., Mills, R., Maras, K., Rai, D., & Brosnan, M. (2019). Is There a Relationship Between Cyber-Dependent Crime, Autistic-Like Traits, and Autism? Journal of Autism and Developmental Disorders.
MITRE. (2022). Neurodiversity in Cybersecurity: A Pilot Program. MITRE Report.
Jones, D., Ghasemi, S., Gracanin, D., & Azab, M. (2023). Privacy, Safety, and Security in Extended Reality: User Experience Challenges for Neurodiverse Users. ResearchGate Publication.
EWI-IEEE. (2013). Practical Approaches to Enhance Cybersecurity Using Neurodiverse Talent. IEEE SecurITism Conference.
Duffy, J., et al. (2024). Promoting Neurodiversity Through MBSE and Other Technical Approaches. INCOSE International Symposium.
Harvard Business Review. (2021). Neurodiversity Is a Competitive Advantage. Harvard Business Review.
IBM. (2023). Cost of a Data Breach Report 2023. https://d110erj175o600.cloudfront.net/wp-content/uploads/2023/07/25111651/Cost-of-a-Data-Breach-Report-2023.pdf