RAND carried out this effort in three parts: first, a review of the literature; second, a set of semi-structured interviews with managers and educators of cybersecurity professionals, supplemented by reportage as appropriate; and third, an examination of what the economic literature suggests about labor markets for cybersecurity professionals. RAND also looked within the broad definition of “cybersecurity professionals” to unearth skills differentiation as relevant to this study.
RAND Corporation is a non-profit institution that helps improve policy and decision making through research and analysis. This research was conducted within the Forces and Resources Policy Center of the RAND National Security Research Division (NSRD). NSRD conducts research and analysis on defense and national security topics for the U.S. and allied defense, foreign policy, homeland security, and intelligence communities and foundations and other nongovernmental organizations that support defense and national security analysis.
Read the full research report here – http://www.rand.org/content/dam/rand/pubs/research_reports/RR400/RR430/RAND_RR430.pdf