Tech brain drain fuels Philippines' cybersecurity skills gap

Commuters queue at a bus station in Mandaluyong, Philippines, July 15, 2022. REUTERS/Lisa Marie David

Commuters queue at a bus station in Mandaluyong, Philippines, July 15, 2022. REUTERS/Lisa Marie David

What’s the context?

A surge in malicious cyber activity has highlighted shortages of cybersecurity professionals - a problem in many poorer countries

  • Philippines faces shortage of cybersecurity experts
  • Hacking incidents jump amid rising tensions with China
  • Digital security skills gap worse in poorer nations

MANILA - Nurses, engineers, doctors - now cybersecurity experts. As the Philippines counts the cost of brain drain, a surge in malicious cyber activity has highlighted the country's digital security skills gap.

U.S. cybersecurity firm Resecurity reported a 325% jump in hacking and other digital intrusions targeting the Philippines during the first quarter of 2024 amid rising tensions with China, largely over disputed territory in the South China Sea.

That prompted President Ferdinand Marcos Jr to launch a cybersecurity strategy to beef up the nation's cyber defences to combat attacks and digital crimes. Its military said last year it would create a cyber command.

But industry analysts say such plans could struggle due to big shortages of skilled "cyber warriors" in the Philippines, which is estimated to need tens of thousands of digital security professionals.

Out of The Box Media Literacy Initiative conducts digital rights and security training programs for Filipino communities through their Take Ctrl ^ Shift Habits program. Out of the Box Media Literacy Initiative/Handout via Thomson Reuters Foundation
Go DeeperPhilippines activists fight back as online threats rise
Users get computer training in Pampanga province, in northern Philippines, October 6, 2016
Go DeeperCoding to training: Philippines tackles online child sexual abuse
A fisherman stands in silhouette behind a boat on San Salvador Island, Masinloc in Zambales Province in the Philippines. Fishermen on the island say China’s attempts to block them from fishing at the Scarborough Shoal is costing them money and threatening their livelihoods. Nov. 16, 2023. Thomson Reuters Foundation/Kathleen Limayo
Go DeeperFilipino fishermen caught in debt net in South China Sea row

Whether targeting ordinary people, journalists or activists, online threats from doxxing to domain blocking and digital surveillance are rising in the Philippines and other Southeast Asian nations, highlighting a lack of resources and expertise to fight them, experts say.

"What the government doesn't recognise is we're having a brain drain not only in the healthcare sector but also in cybersecurity," said JM Cipriano, a cybersecurity professional who has worked for a multinational company in the Philippines.

Despite a higher salary than other careers in IT, he said Filipino cybersecurity experts are being lured abroad by companies offering more money, better working conditions and relocation packages.

Practitioners in the Philippines can expect a monthly salary of between 40,000 and 90,000 pesos ($690-$1,560) - up to six-times the minimum wage, Cipriano told Context.

But he said the Philippines was still losing cybersecurity talent to U.S. companies with offshore offices in Manila, or companies in Singapore, the United Kingdom and the Middle East that offer more competitive salaries.

Globally, the shortage of cybersecurity professionals reached a record last year, with some 4 million vacancies around the world, according to cybersecurity nonprofit ISC2, with the gap growing fastest in developing countries.

Traders gather at the post where Rubrik Inc., the Microsoft backed cybersecurity software startup, is traded at the New York Stock Exchange (NYSE) in New York City, U.S., April 25, 2024. REUTERS/Brendan McDermid

Traders gather at the post where Rubrik Inc., the Microsoft backed cybersecurity software startup, is traded at the New York Stock Exchange (NYSE) in New York City, U.S., April 25, 2024. REUTERS/Brendan McDermid

Traders gather at the post where Rubrik Inc., the Microsoft backed cybersecurity software startup, is traded at the New York Stock Exchange (NYSE) in New York City, U.S., April 25, 2024. REUTERS/Brendan McDermid

'Enormously expensive'

While part of the problem is migration from the Philippines, a major global exporter of labour, domestic shortages are also linked to inadequate training opportunities and policies to boost recruitment at a national level, experts say.

The need for cybersecurity professionals "is not well communicated to the different parts of the country", said Angel Redoble, founder of the Philippine Institute of Cyber Security Professionals, a nonprofit pushing for a secure Philippine cyberspace.

Filipinos can study cybersecurity in only a handful of private universities with high tuition fees, and are often encouraged to pursue certifications for specific training and courses for 15,000 to 20,000 pesos.

Such barriers led 27-year-old former teacher Jaevik Madayag to abandon his plans of working in the field.

"Cybersecurity certifications are enormously expensive for Filipinos and having a certification doesn't guarantee that you could enter that workforce," he said.

With cybersecurity threats and data breaches on the rise, the government is taking steps to boost recruitment.

In January, it launched a new set of cybersecurity standards that schools and training centres can use for their programme curriculum.

Under the new national cybersecurity strategy, there are plans for more specialist degrees and programmes to upskill or retrain existing professionals.

Fostering accessible career progress will be vital, said Madayag, who now does IT support for a leading global tech company.

"Cybersecurity is a niche job in the IT industry," he said. "You have to go through many paths and prerequisites and cannot jump ahead to practice."

($1 = 57.7400 Philippine pesos) 

(Reporting by Mariejo Ramos. Editing by Helen Popper.)


Context is powered by the Thomson Reuters Foundation Newsroom.

Our Standards: Thomson Reuters Trust Principles


Tags

  • Digital Rights
  • Data rights
  • Tech solutions




Get our data & surveillance newsletter. Free. Every week.

By providing your email, you agree to our Privacy Policy.


Latest on Context