How can we address stress faced by cybersecurity professionals?

Working as a cybersecurity professional is challenging. The pressures of the job include securing the hybrid workforce and coping with constantly changing ecosystem and high expectations. Cyber threats like ransomware threaten business operations daily, and cybersecurity teams must stay ahead of motivated adversaries hellbent on achieving malicious objectives. Now, add this to the pressure of complying with national cyber regulations, and a stressful environment becomes evident, experts say.

To address these challenges, organizations should implement policies that encourage a work-life balance, such as flexible working hours, remote work options, and mandatory time off, experts suggest. “During a cyber incident, making sure members of the security team can disconnect to rest and recuperate ensures that the team can continue to operate efficiently during the incident. Additionally, providing resources for mental health support, such as counseling services, can help retain talent effectively,” says Shamla Naidoo, Head of Cloud Strategy and Innovation at Netskope.

Cybersecurity is a unique position in an organization. It has a marked difference from other functions because cybersecurity professionals face certain failures almost daily. “They are very aware of their adversaries but don’t know when or where they will strike. The constant threat of data breaches, the high stakes associated with security failures, and the often high expectations placed on cybersecurity professionals all contribute to overwhelming workloads and burnout in cybersecurity,” Naidoo said.

Due to confidentiality constraints, cybersecurity professionals cannot talk about their stressful situations like most employees. “Having a small community where they can safely share experiences and lessons will support them with the challenges of the job. What’s more, the higher you go, the more difficult it becomes. For decision-makers such as CISOs, a safe place where they can seek help, ask for support, or talk about stressful decisions they make on a daily basis could have huge positive consequences,” Naidoo said.

To address the mental health challenges faced by security specialists, this issue needs to be tackled at two levels: human and technological, experts say.

On the human level, properly managing the shifts of Security Operations Center (SOC) analysts is crucial. “Ensuring adequate rest periods and minimizing overtime can significantly reduce burnout. Regular sessions with a psychologist can help alleviate stress and provide coping strategies for dealing with the pressure of the job,” said Alexey Lukatsky, Managing Director, Cyber Security Business Consultant, Positive Technologies.

Dmitry Volkov, CEO of Group-IB, said: “Collaboration and workload distribution is key to supporting our cybersecurity experts in the face of increased threats. We also need to provide the right tools to automate their routing tasks and improve efficiency. Celebrating success is key in encouraging employees to be involved in research that has an impact within the organization and the cybersecurity landscape. Lastly, cybersecurity professionals seek dependable support throughout crises, ensuring a sense of partnership and assistance before, during, and after challenging situations, fostering a conducive environment for sustained motivation and success.”