Table of Contents
Fetching ...

A Survey-Based Quantitative Analysis of Stress Factors and Their Impacts Among Cybersecurity Professionals

Sunil Arora, John D. Hastings

TL;DR

The paper investigates work-related stress and burnout among cybersecurity professionals using a quantitative survey guided by the Job Demands-Resources model. It finds that 44% report burnout and 28% are uncertain, with high job demands, challenging culture, and insufficient resources intensified by the pandemic and breaches. The results demonstrate the JD-R model's relevance to cybersecurity, reveal widespread under-reporting of stress to management, and propose organizational interventions such as mindfulness programs and improved work conditions. These findings highlight a significant need for human-centered strategies to maintain a resilient cybersecurity workforce and enhance organizational security outcomes.

Abstract

This study investigates the prevalence and underlying causes of work-related stress and burnout among cybersecurity professionals using a quantitative survey approach guided by the Job Demands-Resources model. Analysis of responses from 50 cybersecurity practitioners reveals an alarming reality: 44% report experiencing severe work-related stress and burnout, while an additional 28% are uncertain about their condition. The demanding nature of cybersecurity roles, unrealistic expectations, and unsupportive organizational cultures emerge as primary factors fueling this crisis. Notably, 66% of respondents perceive cybersecurity jobs as more stressful than other IT positions, with 84% facing additional challenges due to the pandemic and recent high-profile breaches. The study finds that most cybersecurity experts are reluctant to report their struggles to management, perpetuating a cycle of silence and neglect. To address this critical issue, the paper recommends that organizations foster supportive work environments, implement mindfulness programs, and address systemic challenges. By prioritizing the mental health of cybersecurity professionals, organizations can cultivate a more resilient and effective workforce to protect against an ever-evolving threat landscape.

A Survey-Based Quantitative Analysis of Stress Factors and Their Impacts Among Cybersecurity Professionals

TL;DR

The paper investigates work-related stress and burnout among cybersecurity professionals using a quantitative survey guided by the Job Demands-Resources model. It finds that 44% report burnout and 28% are uncertain, with high job demands, challenging culture, and insufficient resources intensified by the pandemic and breaches. The results demonstrate the JD-R model's relevance to cybersecurity, reveal widespread under-reporting of stress to management, and propose organizational interventions such as mindfulness programs and improved work conditions. These findings highlight a significant need for human-centered strategies to maintain a resilient cybersecurity workforce and enhance organizational security outcomes.

Abstract

This study investigates the prevalence and underlying causes of work-related stress and burnout among cybersecurity professionals using a quantitative survey approach guided by the Job Demands-Resources model. Analysis of responses from 50 cybersecurity practitioners reveals an alarming reality: 44% report experiencing severe work-related stress and burnout, while an additional 28% are uncertain about their condition. The demanding nature of cybersecurity roles, unrealistic expectations, and unsupportive organizational cultures emerge as primary factors fueling this crisis. Notably, 66% of respondents perceive cybersecurity jobs as more stressful than other IT positions, with 84% facing additional challenges due to the pandemic and recent high-profile breaches. The study finds that most cybersecurity experts are reluctant to report their struggles to management, perpetuating a cycle of silence and neglect. To address this critical issue, the paper recommends that organizations foster supportive work environments, implement mindfulness programs, and address systemic challenges. By prioritizing the mental health of cybersecurity professionals, organizations can cultivate a more resilient and effective workforce to protect against an ever-evolving threat landscape.
Paper Structure (21 sections, 8 figures, 6 tables)

This paper contains 21 sections, 8 figures, 6 tables.

Figures (8)

  • Figure 1: Organization sizes (by number of employees) of the respondents
  • Figure 2: Respondents who feel cybersecurity jobs are more demanding
  • Figure 3: Respondents who have faced added challenges due to COVID-19 or other recent breaches
  • Figure 4: Respondents who get a work call during vacation
  • Figure 5: Respondents who are facing or have faced work stress and burnout
  • ...and 3 more figures