Matt Smith, CTO of Softwerx, explores how businesses can overcome the UK’s growing cybersecurity skills shortage by using Breach and Attack Simulation to proactively defend against evolving ransomware threats.
The UK is facing a growing cybersecurity skills shortage. Despite increased investment in cyber defences, the demand for qualified professionals is outpacing supply leaving a shortfall of tens of thousands of skilled workers, according to the UK Cyber Security Council. 44% of UK businesses have gaps in basic technical cybersecurity skills such as threat detection/monitoring and incident handling, while 27% report gaps in more advanced technical areas like penetration testing, threat intelligence and security architecture.
This imbalance is placing immense pressure on IT security teams, particularly within mid-market firms that often operate with lean resources. These teams are tasked with defending increasingly complex digital environments, yet many are stretched to breaking point. Burnout among security analysts is becoming a critical issue, with human fatigue now a significant risk factor in breach scenarios. A Gartner survey found that 62% of cybersecurity leaders have experienced burnout, citing reasons that include pressure to work late nights and/or weekends, risk of security incidents negatively impacting career and low morale among cybersecurity teams.
Without sufficient expertise, mid-market companies face a heightened risk of data breaches and loss, slower response times to security incidents and potential non-compliance with regulatory requirements. Moreover, the reputational damage and erosion of customer trust that follow a cyberattack can have long-lasting consequences, making it imperative for businesses to address this skills gap proactively.
And with cyberthreats growing in both volume and sophistication, the nation is heading into a perfect storm.
The rising tide of cyber threats and why the mid-market is in the firing line
Cyberthreats are escalating not just in number but in sophistication, speed and impact. According to Beaming, 2024 was the worst year on record for cyberattacks on UK businesses with an average of 753,341 malicious attempts amounting to a new attack every 42 seconds. The third quarter of 2024 saw a peak with 2,192 attacks per day.
AI is turbocharging this threat, with malicious actors weaponising AI to bypass traditional security measures, enabling even novices to pose real threats. Supply chain compromise and zero-day attacks further shrink the window for response.
Today’s threat actors operate like commercial enterprises, armed with AI-powered tools and executing large-scale, targeted attacks with precision. And increasingly, their focus is shifting to the mid-market.
Once considered less appealing than large enterprises, mid-market companies are now squarely on the radar of cybercriminals. The UK Government 2024 Cyber Security Breaches Survey revealed that 45% of medium sized businesses experienced cybercrime in the last 12 months, a rise from 26% in the previous year’s survey. We’re seeing a shift and mid-market companies are no longer flying under the radar.
Why the change? Because mid-market businesses are vulnerable and valuable. They possess significant data but often lack the robust defences, rapid response and recovery capabilities of larger firms. This makes them not only easier to breach but more profitable to exploit.
Coupled with the ongoing shortage of skilled cybersecurity professionals, this creates a collision of risks that puts mid-market organisations in jeopardy.
Tackling the cyber skills gap with smarter strategies for a stronger cyber posture
To effectively counter this perfect storm of risk, mid-market organisations should adopt a strategic blend of advanced technology, resilient processes and people-first approaches.
A good starting point is smarter tooling and automation. AI-powered threat detection and automated incident response can dramatically accelerate the identification, containment and resolution of threats. While automation doesn’t replace human expertise it eliminates repetitive, low-value tasks freeing up time for skilled professionals to focus on complex, high-stakes challenges that demand critical thinking and experience. Equally vital is the prioritisation of threat intelligence. By integrating real-time intelligence feeds security teams can cut through the noise and zero in on the most credible risks. This targeted approach reduces the risk of alert fatigue and improves speed and precision to enable faster, more informed decision-making.
Investment in cybersecurity training for all employees should also be considered. In fact, it should be non-negotiable. By offering structured programs such as certifications, workshops and ongoing education, businesses can build internal expertise and resilience. Even foundational training in cyber hygiene such as phishing attempts or securing passwords can dramatically reduce risk and empower employees to become the first line of defence against cyber threats. After all, your people are your weakest link and your first line of defence.
Partnering with external security specialists can also significantly ease the pressure on in-house IT teams. By leveraging the expertise of managed security service providers or specialist consultancies, businesses gain access to advanced threat detection tools, round-the-clock monitoring and experienced incident responders without the need to hire and train additional full-time staff. This approach not only fills skills gaps but also allows internal teams to focus on strategic initiatives.
Ultimately, technology alone isn’t enough. Cyber resilience hinges on the wellbeing of the people behind the screens. Promoting positive mental health through open communication and proactive stress management not only boosts morale but also strengthens retention of critical talent.
This isn’t just a survival strategy, it’s a blueprint for building a more sustainable, adaptive and future-ready cybersecurity function.
The cybersecurity skills shortage may be a long-term challenge, but mid-market businesses are not powerless. By combining smarter tooling, focused intelligence, balanced workloads and a genuine commitment to team wellbeing, organisations can reduce pressure on their security teams while building the resilience needed to face incoming threats.
