A robust cyber security training platform, or cyber range, is the foundation of the burgeoning cyber workforce. The world is seeing record demand for cyber security professionals, which is expected to reach 3.5 million unfilled positions worldwide by 2021. And while at first blush this figure may seem bloated, a cursory search shows otherwise: According to CyberSeek, there are currently over 300,000 unfilled cyber security positions in the US. ComputerWeekly projects that gap at 350,000 workers in Europe by 2022. And when it comes to unfilled positions in India and the rest of APAC, vacancies easily cross the two million mark.
The shortage in the number of cyber security professionals is only part of the story. The other part has to do with a global training crisis, and how well qualified cyber security candidates are for the job they’re applying for.
Multiple research studies performed by professional organization such as SANS, ISSA and ISACA, have all shown that both organizations and practicing professionals see much room for improvement in their cyber security skills.
Cyber security is a skills-based occupation—the more you practice, the better you get. The more incidents you respond to, the more effective you become. And while theoretical knowledge is essential to understanding the basics of how networks, operating systems and security tools work, without practical, hands-on experience, a SOC analyst will be slow to detect a breach, investigate and foil it. And that is where a cyber range comes in.
A cyber security training platform, known as a cyber range, is a training platform that aims to provide a realistic simulation of cyber attacks in an environment that mirrors a real-life network and security operations center. Much like a shooting range, a cyber range lets cybersecurity practitioners hone their skills in a safe, self-contained environment—without jeopardizing anyone’s data or network. A cyber range is made up of the following components:

Figure 1: A Cyber Range Simulation Platform
How can you tell if a prospective solution is a real cyber security training platform or just a wannabe cyber range?
Here’s a definitive list of what you should be checking for: