With an increase in global cybersecurity threats coupled with a lack of skilled professionals in cybersecurity hiring, there is a high level of professional fatigue reported by businesses worldwide. Every 4 out of 10 cybersecurity professionals in the UK report stress triggering them to consider resignation tentatively within 2022, which will result in a severe crisis in the sector.
The survey of 521 UK cybersecurity decision-makers in communications, utilities, finance, government, transport and aviation found that 95% of respondents are experiencing factors that would make them likely to leave their role in the next 12 months. In addition, more than two in five (42%) believe a breach at their organization is inevitable and do not want it to tarnish their career, while 40% said they are experiencing stress and burnout, which is affecting their personal life.
According to the study, various factors contribute to feelings of stress and exhaustion. Additionally, cyber-attacks are becoming more sophisticated, systems are becoming more interconnected, and there is a constant need to keep up with emerging technologies and supply ever-expanding measures of cyber assurance.
Seniority was found to impact the reasons for quitting a job significantly. There was a great deal at stake for individuals in leadership positions, and those at the director level reported the highest levels of stress and burnout. Unrealistic expectations were cited by department heads as the leading cause of their departure, while managers cited salary as the most important consideration.
The Coalition for Networked Information (CNI) groups have targeted increasing attacks. UK CNI cybersecurity executives have reported an increase in the volume of threats and successful assaults over the past year, with 69 percent reporting that it has become more difficult to detect and respond to threats.
Cyberattacks have increased in frequency and severity for more than seven out of ten CNI organizations since Russia began its military incursion into Ukraine in early 2014. Two-thirds (68%) said it has become more difficult in the last year to hire the proper resources for system security and monitoring, which has only aggravated matters. More than two-thirds (64 percent) of respondents say that their current security operations center (SOC) and remote environment security are beyond their capabilities.
Director of Managed Security Services at Bridewell, Martin Riley, says that talent is now the biggest limitation, and firms cannot afford to lose people. Security leaders require the proper authority, budget, and technology stack to develop and implement an effective threat-led cybersecurity strategy. They should rely on external experts to fill any gaps promptly and assist in alleviating the strain on the team. Workers who see their employers putting much effort into their well-being and assistance are more likely to stay.
CEO of Briewell Inc, Scott Nicholson, informs us there is an ongoing buzz about the industry’s skills, staff retention, and burnout cycle. While there is some adoption, firms cannot improve cybersecurity hiring as they cannot see how hiring experts from other disciplines can help close the skill gap. This exacerbates the situation and could result in organizations missing out on excellent applicants with transferable abilities.
