The allocation of funds in cybersecurity technology is a difficult task to complete as there’s many things to fund, and not much funds to properly provide for them all. As a Chief of information security, the first step I would take is putting a bigger portion of my funds in training current and new workers. Then, implementing the rest of the funds into upgrading security software.

Cybersecurity staff training
Like many jobs, the staff are a crucial part of the business running smoothly, but in cybersecurity, I believe even with the technology today, you need as much staff as possible who are skilled at cybersecurity technology. Staff shortages has been occurring around cybersecurity for too long which is putting the field in risk of systems in danger. In an article called “Digital Innovation Through Cybersecurity Learning Factories”, it was found in a study that over 3.4 million skilled cybersecurity workers are needed. Without the staff to support systems and organizations, crucial risks could occur. For example, system crashes can go unnoticed, patch times can decrease, data breaches and ransomware attacks could become more aggressive. Implementing things like learning factories to educate college graduates who are trying to enter the workforce would be beneficial to practice applying concepts, tools, and skills similar to the real world (Veerasamy, N., Mkhwanazi, T., & Khan, Z., 2023). When discussing cybersecurity software, it plays a crucial role today. It provides the protection for individuals and organizations from cyber threats. Some examples are firewall protection, data encryption, secure authentication, security monitoring and incident response messages. But, as important as these benefits are, it still doesn’t compare to importance of having trained staff. With these benefits if something fails to the point where the software can’t fix the issue or detect the issue, its important to have trained staff to properly handle these things because the system can’t.

Conclusion
In conclusion, both staff training and cybersecurity training are crucial factors to the development of cybersecurity, but when deciding which needs more funding, I believe investing in the training of staff is an important decision as there is over a million jobs needed in the field, and without the staff to monitor the systems for businesses, there is an increase in risks of cyber-attacks. Cybersecurity software has the ability to fix itself it some cases, but when it can’t it’s important for the staff to know the system clearly so instead of paying for new software, the staff has the ability to repair it.

References
Veerasamy, N., Mkhwanazi, T., & Khan, Z. (2023). Digital Innovation Through Cybersecurity Learning Factories. Academic Conferences International Limited.