MWAIS 2024 Proceedings


The World Health Organization recognizes burnout as an occupation-related syndrome, posing potential cybersecurity risks due to increased error rates that can have consequential financial and reputational impacts on organizations. Globally, cybersecurity professionals contend with mental health concerns that can precipitate burnout. Notably, human errors and behavior contribute to 70-80% of data breaches, underscoring the need to deepen our understanding of human factors in cybersecurity. This paper provides a scoping review of the existing literature on burnout among cybersecurity professionals focusing on a standardized definition, identifying antecedents to, and impacts of this phenomenon. The study finds varied yet correlated definitions of burnout. Burnout precursors include stress and fatigue, accompanied by ever-growing security requirements and a talent shortage. Beyond its impact on security, burnout contributes to elevated employee turnover, poor productivity, and diminished well-being of the professional. The findings highlight the critical need to incorporate a human-centric solution to this socio-technical problem.