A Survey-Based Quantitative Analysis of Stress Factors and Their Impacts Among Cybersecurity Professionals
Sunil Arora, John D. Hastings
TL;DR
The paper investigates work-related stress and burnout among cybersecurity professionals using a quantitative survey guided by the Job Demands-Resources model. It finds that 44% report burnout and 28% are uncertain, with high job demands, challenging culture, and insufficient resources intensified by the pandemic and breaches. The results demonstrate the JD-R model's relevance to cybersecurity, reveal widespread under-reporting of stress to management, and propose organizational interventions such as mindfulness programs and improved work conditions. These findings highlight a significant need for human-centered strategies to maintain a resilient cybersecurity workforce and enhance organizational security outcomes.
Abstract
This study investigates the prevalence and underlying causes of work-related stress and burnout among cybersecurity professionals using a quantitative survey approach guided by the Job Demands-Resources model. Analysis of responses from 50 cybersecurity practitioners reveals an alarming reality: 44% report experiencing severe work-related stress and burnout, while an additional 28% are uncertain about their condition. The demanding nature of cybersecurity roles, unrealistic expectations, and unsupportive organizational cultures emerge as primary factors fueling this crisis. Notably, 66% of respondents perceive cybersecurity jobs as more stressful than other IT positions, with 84% facing additional challenges due to the pandemic and recent high-profile breaches. The study finds that most cybersecurity experts are reluctant to report their struggles to management, perpetuating a cycle of silence and neglect. To address this critical issue, the paper recommends that organizations foster supportive work environments, implement mindfulness programs, and address systemic challenges. By prioritizing the mental health of cybersecurity professionals, organizations can cultivate a more resilient and effective workforce to protect against an ever-evolving threat landscape.
