This nightmare became a reality for Indonesia when the National Data Center (PDN) fell victim to a devastating ransomware attack that has sent shockwaves rippling through the nation. The breach has exposed vulnerabilities in the government's ability to protect vital and sensitive data, raising concerns about the broader implications of such incidents. However, rather than assigning blame, this article seeks to highlight a critical issue within Indonesia’s cyber landscape: the cyber talent pool crisis.

The first major challenge is attracting talent. Indonesia needs approximately 600,000 skilled workers in the cyber industry annually, both for the public and private sectors. However, many talented people are more attracted to private sector positions because of the higher salaries offered.

Skilled cybersecurity professionals are therefore more inclined to join the private sector, making it difficult for government bodies to compete for top talent and leading to a shortage of skilled professionals in critical positions within the public sector.

The second problem is retaining talent, which is equally imperative. The cybersecurity field is highly dynamic, requiring constant learning and adaptation. Yet, many professionals leave the industry because of a lack of clear career progression and inadequate incentives.

Transparent and rewarding career paths must be established to validate and propel the expertise of cybersecurity professionals. This approach not only helps maintain a steadfast workforce but also enhances the operational capabilities of cybersecurity units.

The failure to keep the skilled force in the industry will cause a brain drain in the cybersecurity sector. As ladders to the top rank are unavailable, many look to other industries or to abroad for better prospects that are more lucrative.