In its recent survey of 435 senior-level cybersecurity professionals, security-training firm Cybrary found that the demand for people who can protect IT infrastructure against attacks is only increasing. Some 68 percent of those surveyed said there was a “global shortage” in skilled cybersecurity pros, according to an infographic released by the company. Another 74 percent suggested that there was a lack of talent in their specific area of focus. It took an average of 14 weeks for a respondent to fill a particular security job. Among cybersecurity professionals, the top-ranked job categories included:

• Network & application security
• GRC/information assurance
• Malware & threat, and intel

While the most in-demand certifications included:

• Security+
• Ethical Hacking
• Network+
• CISSP
• A+

The high ranking of the Ethical Hacking certification is interesting, given the longtime debate over its worth to security professionals. Whatever certifications they earn, however, tech pros will face a number of significant challenges in 2016 if they want to keep their workplaces secure, including vulnerabilities in the Internet of Things, the rise of “super bad guys” with increasingly sophisticated tools, and a generalized lack of funding to invest in relevant people and technologies. But keeping data locked down isn’t just a task for cyber-security experts; everybody who contributes in some way to an organization’s tech stack, from the executives down to the interns, needs to involve themselves in security, whether by simply obeying best practices or freeing up resources so that security professionals can do their jobs. (For those interested, there’s also an interesting piece in Business Insider on how Ran Corey, who co-founded Cybrary, had to deal with Google abruptly banning his company’s app from the Google Play Store. For developers, it’s a good tutorial on what to do if you ever find yourself in a similar situation, and need to get your app unblocked.)