Resilience for resilience: Managing burnout among cyber leaders | Computer Weekly

"CISOs often operate in environments where security is underfunded, under prioritised, or misunderstood at the board and C-suite level. A lack of senior-level buy-in trickles down into: Budget constraints that limit the scope and impact of the CISO function, including resources for tooling and automation. Skills shortages and restrictive operating models that prevent effective delegation. Strategic misalignment, where short-term delivery is prioritised over long-term business resilience and customer outcomes."

"Security is still often perceived as a business inhibitor until a significant incident occurs. The constant need to 'sell' cyber security within conflicting C-suite priorities burns effort, while rising public and stakeholder awareness amplifies the pressure. For example, in finance, CISOs face strict regulation and intense board and public scrutiny. In the public sector, bureaucratic friction and procurement constraints can complicate strategic investments, leaving CISOs exposed both operationally and reputationally."

"The CISO role is consistently ranked among the most high-pressure in the C-suite. According to ISACA's State of Cybersecurity 2025 report, 66% of cyber security professionals say their role is more stressful now than it was five years ago."

CISOs routinely face underfunding, low prioritisation, and misunderstanding at board and C-suite levels. Lack of senior buy-in drives budget constraints, skill shortages, and restrictive operating models that prevent delegation. Strategic misalignment prioritises short-term delivery over long-term resilience and customer outcomes. CISOs are held accountable for outcomes without sufficient resources or executive backing, causing stress, frustration, and burnout. Security is often viewed as an inhibitor until incidents occur, increasing the need to justify investment amid competing C-suite priorities. Sector-specific pressures amplify exposure, and security must be repositioned as a strategic business enabler through executive engagement and clearer metrics.

Read at ComputerWeekly.com