Tech
Resilience for resilience: Managing burnout among cyber leaders | Computer Weekly
While organisations invest in cyber resilience, the resilience of those leading the charge, chief information security officers (CISOs), is often overlooked. The CISO role is consistently ranked among the most high-pressure in the C-suite. According to ISACA’s State of Cybersecurity 2025 report, 66% of cyber security professionals say their role is more stressful now than it was five years ago.
CISOs often operate in environments where security is underfunded, under prioritised, or misunderstood at the board and C-suite level. A lack of senior-level buy-in trickles down into:
- Budget constraints that limit the scope and impact of the CISO function, including resources for tooling and automation.
- Skills shortages and restrictive operating models that prevent effective delegation.
- Strategic misalignment, where short-term delivery is prioritised over long-term business resilience and customer outcomes.
This creates a vicious cycle: CISOs are held accountable for outcomes without sufficient resources or executive backing, leading to stress, frustration, and burnout.
Security is still often perceived as a business inhibitor until a significant incident occurs. The constant need to ‘sell’ cyber security within conflicting C-suite priorities burns effort, while rising public and stakeholder awareness amplifies the pressure.
For example, in finance, CISOs face strict regulation and intense board and public scrutiny. In the public sector, bureaucratic friction and procurement constraints can complicate strategic investments, leaving CISOs exposed both operationally and reputationally.
To move the needle on cyber security, CISOs must go beyond technical defences and reposition security as a strategic business enabler. This starts with shifting board and C-suite mindsets, through education, influence, and persistent engagement, to see cyber security as integral to innovation and resilience.
Developing executive-level dashboards that articulate the organisation’s cyber security posture can provide visibility into progress, operational resilience, and how security initiatives align with strategy and enterprise goals. Equally critical is framing cyber risk in business terms, translating technical threats into quantifiable impacts on revenue, regulation, and user impact. This kind of communication elevates the CISO’s role from IT steward to strategic partner.
The ever-changing cyber landscape
Unlike other leadership roles, the CISO must constantly adapt to overlapping and complex regulations, such as the UK Data Protection Act, the EU General Data Protection Regulation (GDPR), and frameworks like DORA and FCA PS21/3. They also face threats including ransomware and AI-driven attacks. Additionally, CISOs must manage expanding attack surfaces resulting from offshoring, cloud adoption, and increasing third-party dependencies. Compounding these challenges are rapid technological shifts, such quantum computing and generative AI.
CISOs must simultaneously manage today’s risk, ensure operational integrity, steer future strategy, and monitor an evolving landscape, all in real time. The pace of threats means new systems, technologies, or vulnerabilities can be targeted within hours of going live, leaving little margin for error or recovery.
The rapid pace of digital transformation, while essential for business growth, expands risk and complexity beyond what traditional operating models can accommodate. CISOs must adapt at speed, safeguarding organisations against increasingly sophisticated threats.
In healthcare, for example, CISOs face ransomware threats that directly impact patient safety. In large global organisations, tool sprawl and third-party outsourcing increase complexity and reduce visibility, leaving CISOs with fragmented control capabilities.
Building a stronger cyber security posture requires a unified, risk-based approach that clearly delegates controls and accountability across teams and partners. By layering zero-trust architecture with continuous third-party monitoring, organisations can shrink their attack surface and keep vendor risk in check. Running threat simulation exercises further sharpens the security team’s agility, preparing them to respond to emerging threats before they escalate.
Systemic illusions and cognitive overload
While strategic misalignments and resource constraints put the CISO under pressure, the issue of a mismatch between accountability and authority persists. CISOs are expected to secure systems and manage risk across business units, outsourced services and technologies they don’t directly control which leaves them accountable for outcomes without clear decision rights or contractual levers.
The illusion of control arises when CISOs are accountable for cyber security risk but lack authority to enforce controls, especially across fragmented, outsourced, or federated environments. Their role shifts from decisive action to constant negotiation, increasing stress and accountability without power to drive change. In some public sector organisations, the CISO role is secondary or voluntary, often combined with IT delivery, forcing individuals to prioritise security against operational delivery.
Driving change in cyber security leadership demands structural and cultural alignment. Establishing cross-functional governance and defining risk ownership between security and business leaders ensures that cyber risk becomes part of everyday executive decision-making. Embedding security deliverables and risk criteria into all business projects further reinforces that cyber security is a shared accountability. At the same time, supporting the CISO’s own resilience and wellbeing is crucial. Access to peer networks, executive coaching, and setting clear boundaries can help mitigate cognitive overload.
From burnout to balance
CISO burnout is not a personal weakness but a consequence of conflicting organisational design. Until cyber security is embedded as a core business function, CISOs will continue to face impossible expectations and fragmented authority. Organisations must redefine accountability and empower CISOs with real decision-making authority, and invest in resilience, for both their people and their strategies. Only then will cyber security leadership become a source of business strength, rather than a burnout risk.
John Skipper and Farrukh Ahmad are cyber security experts at PA Consulting
Tech
The Government Shutdown Is a Ticking Cybersecurity Time Bomb
Amid a government shutdown that has dragged on for more than five weeks, the United States Congressional Budget Office said on Thursday that it recently suffered a hack and moved to contain the breach. CBO provides nonpartisan financial and economic data to lawmakers, and The Washington Post reported that the agency was infiltrated by a “suspected foreign actor.”
CBO spokesperson Caitlin Emma told WIRED in a statement that it has “implemented additional monitoring and new security controls to further protect the agency’s systems” and that “CBO occasionally faces threats to its network and continually monitors to address those threats.” Emma did not address questions from WIRED about whether the government shutdown has impacted technical personnel or cybersecurity-related work at CBO.
With increasing instability in the Supplemental Nutrition Assistance Program (SNAP) leaving Americans hungry, air traffic control personnel shortages disrupting flights, financial devastation for federal workers, and mounting operational shortages at the Social Security Administration, the shutdown is increasingly impacting every corner of the US. But researchers, former and current government workers, and federal technology experts warn that gaps in foundational activities during the shutdown—things like system patching, activity monitoring, and device management—could have real effects on federal defenses, both now and for years to come.
“A lot of federal digital systems are still just running in the cloud throughout the shutdown, even if the office is empty,” says Safi Mojidi, a longtime cybersecurity researcher who previously worked for NASA and as a federal security contractor. “If everything was set up properly, then the cloud offers an important baseline of security, but it’s hard to rest easy during a shutdown knowing that even in the best of times there are problems getting security right.”
Even before the shutdown, federal cybersecurity workers were being impacted by reductions in force at agencies like the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency—potentially hindering digital defense guidance and coordination across the government. And CISA has continued cutting staff during the shutdown as well.
In a statement, spokesperson Marci McCarthy said “CISA continues to execute on its mission” but did not answer WIRED’s specific questions about how its work and digital defenses at other agencies have been impacted by the government shutdown, which she blamed on Democrats.
The government’s transition to the cloud over the last decade, as well as increased attention to cybersecurity in recent years, does provide an important backstop for a disruption like a shutdown. Experts emphasize, though, that the federal landscape is not homogenous, and some agencies have made more progress and are better equipped than others. Additionally, missed and overlooked digital security work that accumulates during the shutdown will create a backlog when workers return that could be difficult to surmount.
Tech
Don’t Sleep on This Brooklinen Flash Sale
Winter bedding is different from summer bedding—thicker, loftier, softer, cozier—and now’s the perfect time to upgrade thanks to Brooklinen’s Flash Sale. We test a lot of bedding at WIRED for our numerous sleep-related buying guides, and Brooklinen is mentioned in nearly all of them. Its bedding is high-quality, aesthetically pleasing, and functions like it should. The brand hosts relatively frequent sales, but it’s rare that so many of our top picks are discounted at the same time. Many of our favorite bedding items we’ve hand-tested on our own beds are on sale through November 10. If you’re in the market for new sheets, quilts, or even a down comforter, we’ve highlighted our recommendations below.
Good bedding starts with good sheets. You can get 20 percent off the Luxe Sateen Core Sheet set in 21 colors across six sizes; they’re some of our favorite sateen sheets thanks to their silky, cooling texture and thick, quick-to-warm weave. They’re slick and slinky, and they warm up faster than traditional cotton sheets. If you don’t love sateen or you don’t need the warmth it provides, there’s also a deal on crispy, crinkly percale sheets that WIRED bedding expert Nena Farrell recommends.
Once you’ve upgraded your sheets, top them with a down comforter or quilt. For folks in colder climates, the Brooklinen All-Season Down Comforter ($60 off) is a worthy choice. I tested it during the coldest months of the year in northern Illinois, and it kept me plenty warm while offering that classic, crinkly, hotel-like experience. The baffle box construction keeps the down evenly dispersed, and it’s lofty without feeling too lightweight. You could also go with the pricier ultra-warm option, but that was almost too warm for me. It’d be nice if you need a heavy comforter or you run very cold. For additional blanket options, Brooklinen’s AirWeave line has a few contenders on sale, all of which I’ve liked.
Power up with unlimited access to WIRED. Get best-in-class reporting and exclusive subscriber content that’s too important to ignore. Subscribe Today.
Tech
Denmark’s government aims to ban access to social media for children under 15
Denmark’s government on Friday announced an agreement to ban access to social media for anyone under 15, ratcheting up pressure on Big Tech platforms as concerns grow that kids are getting too swept up in a digitized world of harmful content and commercial interests.
The move would give some parents—after a specific assessment—the right to let their children access social media from age 13. It wasn’t immediately clear how such a ban would be enforced: Many tech platforms already restrict pre-teens from signing up. Officials and experts say such restrictions don’t always work.
Such a measure would be among the most sweeping steps yet by a European Union government to limit use of social media among teens and younger children, which has drawn concerns in many parts of an increasingly online world.
Speaking to The Associated Press, Caroline Stage, Denmark’s minister for digital affairs, said 94% of Danish children under age 13 have profiles on at least one social media platform, and more than half of those under 10 do.
“The amount of time they spend online—the amount of violence, self-harm that they are exposed to online—is simply too great a risk for our children,” she said, while praising tech giants as “the greatest companies that we have. They have an absurd amount of money available, but they’re simply not willing to invest in the safety of our children, invest in the safety of all of us.”
No rush to legislation, no loopholes for tech giants
Stage said a ban won’t take effect immediately. Allied lawmakers on the issue from across the political spectrum who make up a majority in parliament will likely take months to pass relevant legislation.
“I can assure you that Denmark will hurry, but we won’t do it too quickly because we need to make sure that the regulation is right and that there is no loopholes for the tech giants to go through,” Stage said. Her ministry said pressure from tech giants’ business models was “too massive.”
It follows a move in December in Australia, where parliament enacted the world’s first ban on social media for children—setting the minimum age at 16.
That made platforms including TikTok, Facebook, Snapchat, Reddit, X and Instagram subject to fines of up to 50 million Australian dollars ($33 million) for systemic failures to prevent children younger than 16 from holding accounts.
Officials in Denmark didn’t say how such a ban would be enforced in a world where millions of children have easy access to screens. But Stage noted that Denmark has a national electronic ID system—nearly all Danish citizens over age 13 have such an ID—and plans to set up an age-verification app. Several other EU countries are testing such apps.
“We cannot force the tech giants to use our app, but what we can do is force the tech giants to make proper age verification, and if they don’t, we will be able to enforce through the EU commission and make sure that they will be fined up to 6% of their global income.”
Aiming to shield kids from harmful content online
Many governments have been grappling with ways of limiting harmful fallout from online technologies, without overly squelching their promise. Stage said Denmark’s legislative push was “not about excluding children from everything digital”—but keeping them away from harmful content.
China—which manufacturers many of the world’s digital devices—has set limits on online game time and smart-phone time for kids.
Prosecutors in Paris this week announced an investigation into allegations that TikTok allows content promoting suicide and that its algorithms may encourage vulnerable young people to take their own lives.
“Children and young people have their sleep disrupted, lose their peace and concentration, and experience increasing pressure from digital relationships where adults are not always present,” the Danish ministry said. “This is a development that no parent, teacher or educator can stop alone.”
The EU’s Digital Services Act, which took effect two years ago, forbids children younger than 13 to hold accounts on social media like TikTok and Instagram, video sharing platforms like YouTube and Twitch, and sites like Reddit and Discord, as well as AI companions.
Many social media platforms have for years banned anyone 13 or under from signing up for their services. TikTok users can verify their ages by submitting a selfie that will be analyzed to estimate their age. Meta Platforms, parent of Instagram and Facebook, says it uses a similar system for video selfies and AI to help figure out a user’s age.
TikTok said in an email that it recognizes the importance of Denmark’s initiative.
“At TikTok, we have steadfastly created a robust trust and safety track record, with more than 50 preset safety features for teen accounts, as well as age appropriate experiences and tools for guardians such as Family Pairing,” a tool allowing parents, guardians, and teens to customize safety settings.
We look forward to working constructively on solutions that apply consistently across the industry,” it added.
Meta didn’t respond immediately to requests for comment from the AP.
“We’ve given the tech giants so many chances to stand up and to do something about what is happening on their platforms. They haven’t done it,” said Stage, the Danish minister. “So now we will take over the steering wheel and make sure that our children’s futures are safe.”
© 2025 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed without permission.
Citation:
Denmark’s government aims to ban access to social media for children under 15 (2025, November 7)
retrieved 7 November 2025
from https://techxplore.com/news/2025-11-denmark-aims-access-social-media.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.
-
Tech1 week agoNew diode chain could be used to develop high-power terahertz technologies
-
Business1 week agoChocolate’s reign over Halloween is under threat from inflation, tariffs and high cocoa prices
-
Tech1 week agoGiant, Spooky Animatronics Are 75 Percent Off at the Home Depot
-
Business1 week agoPrinces Group valued at £1.16bn as food firm launches London float
-
Tech1 week agoDisney content has gone dark on YouTube TV. Here’s what customers should know
-
Fashion1 week agoUS Senate passes legislation challenging Trump’s tariffs on Canada
-
Business1 week agoDabur India Q2 Results: Net Profit Rises 6.5% YoY To Rs 444.8 Crore, Revenue Up 5.4%
-
Sports1 week ago
Ravens are back in the hunt after two straight wins and Lamar Jackson’s return

-Reviewer-Photo-SOURCE-Louryn-Strampe.jpg)