funding: a considerable drop in cyber security funding Chart 6: Did the respondents consider the funds allocated to cyber security in 2020 sufficient? (%) While most respondents stated that their budget had not changed or had increased in 2019, the funds allo­ cated to cyber security in 2020 decreased in 43% of cases (Chart 4). By contrast, the proportion of the budget spent on cyber security was comparable to 2019 and ranged between 0% and 5% of the organisation’s total budget for most respondents (Chart 5). More than half the organisations considered the amount insufficient (Chart 6). Chart 4: Development of respondents’ cyber security budgets compared with 2019 (%) DECREASED 43% REMAINED THE SAME 39% INCREASED 12% DO NOT KNOW 6% 0 20 40 Chart 5: Share of the organisation’s budget allocated to cyber security in 2020 (% of respondents) 0–2% 62% 2–5% 13% YES 40% NO 60% people – experts: experienced workers stay but newcomers are discouraged by the financial conditions 68% of the organisations participating in the question­ naire survey stated that low salaries discouraged new workers from cyber security jobs during the hiring pro­ cess, particularly in the public sphere and healthcare. The lack of cyber security experts is a global issue. The increased demand for them means that private sector organisations are better equipped to pay higher salaries for these experts (Chart 7). In more than half the organ­ isations, cyber security is ensured by workers with rele­ vant work experience of 5 to 15 years or more (Chart 8). According to the respondents, cyber security architect and SIEM4 surveillance roles or services are the most difficult to fill in the cyber security sphere. One positive thing is that once a post is filled, the turnover of cyber security workers the organisations have to face is low. Only 10% of the respondents reported the departure of one or two employees, the main reason being other than the amount of remuneration in 74% of the cases. Chart 7: Percentage of organisations from the public and private sectors for which the salary represented a crucial factor discouraging applicants for jobs in cyber security in 2020 (%) 5–10% 6% 10–15% 1% MORE THAN 15% 2% PUBLIC SECTOR 77% DO NOT KNOW 13% PRIVATE SECTOR 46% OTHER 3% 0 4 20 40 60 4 The cyber security roles and their descriptions are taken from The cyber security roles and their descriptions are taken from Decree No 82/2018, Decree on cyber No security. 82/2018, on cyber security. Cyber Security in 2020 from the Perspective of Czech Institutions, Organisations, and Companies 10