Wondering if infosec folks consider the risk of burnout to be an unavoidable part of cybersecurity roles?
Yes, it’s unavoidable in cyber43%
No, it can be avoided48%
I don’t know…7%
Sort by:
Honestly, saying that infosec folks are simply doomed to burn out sounds like an excuse for the inability to properly communicate the risks and consequences to the business. In my opinion, allowing my security team to burn out creates much higher exposure over much longer period of time than any limitation into the coverage of the infosec operations.
We discuss cyber burnout regularly on the SSE Forum podcast. I think both the employee and employer has to take some responsibility for burnout. As employees we need to try and be aware of the symptoms, but so do our employers. We need to be able to take breaks when we feel we are getting overwhelmed.
We must ensure that we are leading by example on work/life balance. The stresses of cyber are hard to turn off, but if our people don't see us taking downtime to recharge, they won't either.
To avoid burnout in the cybersecurity industry, professionals should prioritize work-life balance, set clear boundaries, practice stress-management techniques like exercise and mindfulness, engage in continuous professional development, and foster a supportive work environment that encourages breaks and recognizes achievements.
I see the Yes and No are not so far... I do agree for YES, particularly in situations of staff shortages.