Security operations (SecOps) teams are being asked to do more with less, prompting higher stress levels that negatively impact both their work and personal lives, ThreatConnect said in introducing its recently released Cybersecurity Under Stress report.
“Cybersecurity needs a rethink but is far from being broken,” wrote Adam Vincent, ThreatConnect co-founder and chief executive. “The industry is on a trajectory to make security leadership more business-driven, aligned with all parts of an organization,” he said. “One of the biggest challenges that cybersecurity leaders face today is gaining business buy-in for what needs to be done and the specific initiatives that need to be put in place to protect the organization,” said Vincent. “Cybersecurity should not become a black hole of investment but rather an integral part of business.”
The study's findings are gleaned from responses to a cybersecurity retention and job survey of 503 IT security decision makers across the U.S. and U.K. Overall, the report found a worrisome level of staff turnover, skills shortages, burnout, and low staff morale, the Arlington, Virginia-based risk assessment security specialist said.
Here are some findings from the study:
Top three barriers to recruiting people with cybersecurity skills:
On cybersecurity capabilities:
On staff turnover:
Top three reasons employees are leaving their current job:
On workplace stress: