Cybersecurity skills shortage requires a new approach