PDF Security managers trying to hire new staff this year and beyond face some tough realities: Top-level security superstars are hard to find, if they exist at all. Some security budgets are tightening. And there's a startling lack of "soft" communications skills among security professionals. These are the key trends found in two recent and separate studies of the security workforce by noted security industry groups ISACA and (ISC)². Both studies advise security managers to start by consulting the Workforce Framework for Cybersecurity (NICE Framework), the 800-181 document published by NIST. “The Fortune 50 companies may have a good idea on what a cybersecurity department should look like, but there are even large and certainly midsize companies that are still struggling to figure this out,” says Clar Rosso, CEO of (ISC)².