The cybersecurity industry plays a critical role in safeguarding businesses, governments and individuals from an ever-growing range of digital threats.
As cyber attacks become more sophisticated, the demand for skilled professionals continues to rise. Despite its importance and rapid growth, our industry struggles with a significant lack of diversity that limits opportunities for underrepresented groups.
Women, racial and ethnic minorities, LGBTQI+ individuals and people with disabilities remain underrepresented in cybersecurity roles. This lack of diversity not only hinders innovation but also weakens our industry’s ability to address complex security challenges from multiple perspectives.
Addressing these disparities is essential for creating a more inclusive, resilient, and effective cybersecurity workforce.
Tackling industry disparity head on
Back in 2016, I started the IN Security movement because I experienced first-hand the glaring disparity in the cybersecurity industry – a lack of diversity and an exclusionary culture that was causing companies to be less safe and less innovative – driving talented women and other underrepresented groups away. According to the latest data from ISC2, the world’s leading professional organisation, between 20% to 25% of security teams globally are comprised of women.
As someone who has spent decades in this field, I couldn’t stand by and watch the industry miss out on such incredible potential. It wasn’t just about fairness; it was about better security outcomes. Diversity leads to innovation and improved problem-solving.
I founded IN Security to empower individuals, challenge stereotypes, and create an inclusive community where everyone feels they belong and can thrive. I wanted to make women in cyber standard, not the exception. Women offer a strategic competitive advantage to business as research shows that the most gender diverse enterprises globally are achieving 73% better decision making and a 25% revenue uplift.
The inspirational stories of pioneering women
Through my active role as executive committee advisor to e2e-assure, a provider of managed threat detection & response, I get to oversee the fantastic work being carried out by its staff, and its more widely diverse, growing female team. The organisation shares my values around the importance of its people and that diversity sits at the core of truly resilient cybersecurity. That’s why e2e-assure is committed to hiring those with neurodiversity, with 10% of employees identifying as neurodiverse.
There are many inspiring stories from the community that I can share but one that is particularly pertinent is of a woman I met from Europe. I had the privilege of supporting her technically, financially, and emotionally during a pivotal time in her life.
She was at a crossroads, struggling to find her place in a field where women often feel unwelcome. She was low on money, struggling to afford to eat, pay for books and technology at university, and was just about ready to quit.
Today, she’s a cyberSecurity team leader for a satellite and radio astronomy station, and is thriving. Her success is testament to her resilience and brilliance, and I’m proud that IN Security played a small role in guiding her.
Why the code of conduct is still important today
The code of conduct is the foundation of IN Security. It’s not just a set of rules; it’s a declaration of our values. It ensures that our community remains safe, inclusive, and respectful—a space where everyone can contribute their best ideas without fear of discrimination or harassment.
This code extends beyond our events and online spaces; it’s something we encourage individuals and organisations to adopt as a mindset. When people feel valued and respected, they can focus on what truly matters: solving challenges, innovating, and driving progress in cybersecurity.
Plans for the future & the wider landscape
This year, we’re focusing on expanding access to scholarships, and resources to reach even more people, especially woman, young people, and those from less privileged backgrounds. Cybersecurity is evolving rapidly, and the industry faces a skills shortage that we can address by making it more inclusive.
We’re also continuing with our initiatives to educate organisations on the tangible benefits of diversity – not as a checkbox exercise, but as a critical business strategy. I’m especially excited to continue working closely with e2e-assure as the organisation expands with its recent investment announcement. As a result, continuing to create more opportunities and growth potential for women in cybersecurity.
Looking ahead, I see an industry that has the potential to transform itself. With advancements in AI and other technologies, we must ensure that ethical considerations and diversity are baked into every layer of development. The stakes are too high to leave anyone out of the conversation.
Reflecting on the MBE and hard-fought battle for equality
Receiving the MBE is an incredible honour, but it’s not just my achievement. It represents the collective efforts of everyone who has supported IN Security and championed inclusivity in this industry. For me, it’s a reminder that this work matters and that there’s still so much more to do. The award isn’t a conclusion; it’s a motivation to keep pushing for meaningful change.
Creating a truly diverse and welcoming industry requires ongoing commitment from individuals, organisations, and leaders who are willing to challenge the status quo.
At its core, my goal remains simple: to create an industry where people from all walks of life feel empowered to contribute, innovate, and lead. If I can play even a small part in making that vision a reality, then it’s all been worth it.
As the cybersecurity landscape continues to evolve, fostering an inclusive culture will not only strengthen the industry but also ensure that it benefits from the full spectrum of talent, perspectives, and innovation necessary to tackle emerging threats.