A study from (ISC)2 found that the global shortage of IT security professionals is driven by a combination of business conditions, executives who don't understand the need for security and an inability to locate enough qualified IT security professionals.