Published 2025 surveys record 47% of risk and security professionals reporting some level of burnout, 63% of chief information security officers having experienced or witnessed it within the year, and close to 59% of cybersecurity professionals considering a career change — citing stress, absent advancement and workplace culture.
The Job Has An Unusual Shape
Success in security is the absence of an event, which is unobservable and therefore unrewardable. Failure is a public incident with a named owner. The work is adversarial, continuous, and conducted against opponents who choose when to act.
And this corpus documents the structural conditions the surveys describe: teams understaffed by budget at 25-1211, operating estates they cannot patch at 25-0729, against techniques no control reaches at 25-0224, under obligations that assume capacity they do not have at 25-1223.
Attrition Compounds In This Specific Discipline
Most of what makes a security team effective is not transferable knowledge. It is knowing that this system was never meant to be internet-facing, that this integration was a temporary fix in 2019, that this alert fires falsely every Tuesday.
When someone leaves, that goes with them, and the replacement — if there is one — spends a year rebuilding it. The 300,000-record bulk download at 25-0612 and the ten-month ERP dwell at 26-0620 are exactly the kind of thing an experienced person notices and a new one does not.
What This Desk Will Not Claim
No source we reviewed establishes a causal link between practitioner burnout and incident outcomes. The corpus cannot say that any specific failure in this database happened because somebody was exhausted.
The honest statement is that the discipline reports conditions that would degrade performance in any field, that its output is difficult to measure at the best of times, and that nobody is measuring this. Graded medium, on self-selected survey data.
Built on published survey research, listed below, with self-selected respondents. No causal link to incident outcomes is asserted. Corrections: corrections@forensicpost.com.