Traditional Practices Predominate for Recruiting and Retention

Like USAF, most of the companies we interviewed preferred to hire early-career staff and retain them for decades. Consequently, are the often-voiced government concerns of a cyber-workforce shortage also felt in the commercial sector? 78 And if so, have companies had success with nontraditional approaches, such as cyber competitions and retention incentives, or do they employ other practices? We describe commercial practices associated with recruiting and retention for IT and InfoSec personnel based on interview results and the literature. Most of the large companies we interviewed described the importance of hiring staff with a bachelor’s degree. First, such a degree