The Adverse Effects of Ignoring Fatigue on Safety
Have you ever wondered how mental health affects different industries? Ram Vaidyanathan, IT Security Evangelist at ManageEngine, explains why cybersecurity has become a key point in addressing mental health issues in the industry.
For many years, security analysts have prioritized their work over their mental health. However, cracks are beginning to appear. Burned out and overwhelmed analysts are another silent cybersecurity epidemic that organizations will have to manage. According to Gartner, 50% of cybersecurity leaders will change positions by 2025 due to job stress and burnout. Forrester analyst Jinan Budge says managing burnout and mental health is a priority for the security team. CISOs (Information Security Officers) must address the lack of importance placed on mental health before it is too late.
Professional burnout is included as an “occupational phenomenon” in the 11th Revision of the International Classification of Diseases (ICD-11). The WHO defines it as a syndrome caused by inadequate management of work stress. Energy depletion, feelings of negativity or cynicism toward one’s job, and decreased personal effectiveness are three listed symptoms of job burnout. When it comes to safety, burnout affects both business results and individual effectiveness.
In a survey conducted by Enterprise Strategy Group and ISSA, two-thirds of cybersecurity professionals rated their job as “difficult.” Almost half of them are considering leaving their jobs. This could lead to a continued reduction in SOC (Security Operations Center) teams, in addition to the existing gap between supply and demand. A smaller SOC team could mean a greater risk of data breaches, as well as a greater possibility of financial and reputational losses.
In addition to the primary responsibility of improving security maturity in their organizations, CISOs are tasked with fostering highly productive security teams. This involves addressing the various issues that affect the mental health of security analysts, including burnout, motivation levels, and lack of security automation.
CISOs can approach it in four ways:
Recognize burnout in security teams: Acknowledging the big problem instead of hiding it can lead to discussing possible solutions and best practices for the entire sector.
Foster an environment of open communication: CISOs should encourage employees to prioritize their mental health, normalize asking for help, and utilize the services the organization offers.
Implementation of an effective recovery plan: Investing in cyber insurance and implementing a customized, error-free incident response strategy will go a long way to ensuring a plan B is in place and reduce the stress a frontline analyst will face.
Invest in security analysis platforms: The advent of AI means that organizations can now invest in security analytics solutions that automate secondary and repetitive tasks.
Any member, regardless of their level, can experience burnout. While analysts deal with endless alerts, CISOs and SOC managers have to confront the fear of being held responsible for any sudden cybersecurity incident and its repercussions.
Greater mental health awareness is needed in security teams. Attackers continue to use sophisticated techniques to penetrate corporate networks and devise new ways to deploy social engineering techniques.
Did you imagine that mental well-being would influence certain tasks in such a way? Do not forget to leave your comments.