Connect with us

Tech

Resilience for resilience: Managing burnout among cyber leaders | Computer Weekly

Published

on

Resilience for resilience: Managing burnout among cyber leaders | Computer Weekly


While organisations invest in cyber resilience, the resilience of those leading the charge, chief information security officers (CISOs), is often overlooked. The CISO role is consistently ranked among the most high-pressure in the C-suite. According to ISACA’s State of Cybersecurity 2025 report, 66% of cyber security professionals say their role is more stressful now than it was five years ago.

CISOs often operate in environments where security is underfunded, under prioritised, or misunderstood at the board and C-suite level. A lack of senior-level buy-in trickles down into:

  • Budget constraints that limit the scope and impact of the CISO function, including resources for tooling and automation.
  • Skills shortages and restrictive operating models that prevent effective delegation.
  • Strategic misalignment, where short-term delivery is prioritised over long-term business resilience and customer outcomes.

This creates a vicious cycle: CISOs are held accountable for outcomes without sufficient resources or executive backing, leading to stress, frustration, and burnout.

Security is still often perceived as a business inhibitor until a significant incident occurs. The constant need to ‘sell’ cyber security within conflicting C-suite priorities burns effort, while rising public and stakeholder awareness amplifies the pressure.

For example, in finance, CISOs face strict regulation and intense board and public scrutiny. In the public sector, bureaucratic friction and procurement constraints can complicate strategic investments, leaving CISOs exposed both operationally and reputationally.

To move the needle on cyber security, CISOs must go beyond technical defences and reposition security as a strategic business enabler. This starts with shifting board and C-suite mindsets, through education, influence, and persistent engagement, to see cyber security as integral to innovation and resilience.

Developing executive-level dashboards that articulate the organisation’s cyber security posture can provide visibility into progress, operational resilience, and how security initiatives align with strategy and enterprise goals. Equally critical is framing cyber risk in business terms, translating technical threats into quantifiable impacts on revenue, regulation, and user impact. This kind of communication elevates the CISO’s role from IT steward to strategic partner.

The ever-changing cyber landscape

Unlike other leadership roles, the CISO must constantly adapt to overlapping and complex regulations, such as the UK Data Protection Act, the EU General Data Protection Regulation (GDPR), and frameworks like DORA and FCA PS21/3. They also face threats including ransomware and AI-driven attacks. Additionally, CISOs must manage expanding attack surfaces resulting from offshoring, cloud adoption, and increasing third-party dependencies. Compounding these challenges are rapid technological shifts, such quantum computing and generative AI.

CISOs must simultaneously manage today’s risk, ensure operational integrity, steer future strategy, and monitor an evolving landscape, all in real time. The pace of threats means new systems, technologies, or vulnerabilities can be targeted within hours of going live, leaving little margin for error or recovery.

The rapid pace of digital transformation, while essential for business growth, expands risk and complexity beyond what traditional operating models can accommodate. CISOs must adapt at speed, safeguarding organisations against increasingly sophisticated threats.

In healthcare, for example, CISOs face ransomware threats that directly impact patient safety. In large global organisations, tool sprawl and third-party outsourcing increase complexity and reduce visibility, leaving CISOs with fragmented control capabilities.

Building a stronger cyber security posture requires a unified, risk-based approach that clearly delegates controls and accountability across teams and partners. By layering zero-trust architecture with continuous third-party monitoring, organisations can shrink their attack surface and keep vendor risk in check. Running threat simulation exercises further sharpens the security team’s agility, preparing them to respond to emerging threats before they escalate.

Systemic illusions and cognitive overload

While strategic misalignments and resource constraints put the CISO under pressure, the issue of a mismatch between accountability and authority persists. CISOs are expected to secure systems and manage risk across business units, outsourced services and technologies they don’t directly control which leaves them accountable for outcomes without clear decision rights or contractual levers.

The illusion of control arises when CISOs are accountable for cyber security risk but lack authority to enforce controls, especially across fragmented, outsourced, or federated environments. Their role shifts from decisive action to constant negotiation, increasing stress and accountability without power to drive change. In some public sector organisations, the CISO role is secondary or voluntary, often combined with IT delivery, forcing individuals to prioritise security against operational delivery.

Driving change in cyber security leadership demands structural and cultural alignment. Establishing cross-functional governance and defining risk ownership between security and business leaders ensures that cyber risk becomes part of everyday executive decision-making. Embedding security deliverables and risk criteria into all business projects further reinforces that cyber security is a shared accountability. At the same time, supporting the CISO’s own resilience and wellbeing is crucial. Access to peer networks, executive coaching, and setting clear boundaries can help mitigate cognitive overload.

From burnout to balance

CISO burnout is not a personal weakness but a consequence of conflicting organisational design. Until cyber security is embedded as a core business function, CISOs will continue to face impossible expectations and fragmented authority. Organisations must redefine accountability and empower CISOs with real decision-making authority, and invest in resilience, for both their people and their strategies. Only then will cyber security leadership become a source of business strength, rather than a burnout risk.

John Skipper and Farrukh Ahmad are cyber security experts at PA Consulting



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

The Government Shutdown Is a Ticking Cybersecurity Time Bomb

Published

on

The Government Shutdown Is a Ticking Cybersecurity Time Bomb


Amid a government shutdown that has dragged on for more than five weeks, the United States Congressional Budget Office said on Thursday that it recently suffered a hack and moved to contain the breach. CBO provides nonpartisan financial and economic data to lawmakers, and The Washington Post reported that the agency was infiltrated by a “suspected foreign actor.”

CBO spokesperson Caitlin Emma told WIRED in a statement that it has “implemented additional monitoring and new security controls to further protect the agency’s systems” and that “CBO occasionally faces threats to its network and continually monitors to address those threats.” Emma did not address questions from WIRED about whether the government shutdown has impacted technical personnel or cybersecurity-related work at CBO.

With increasing instability in the Supplemental Nutrition Assistance Program (SNAP) leaving Americans hungry, air traffic control personnel shortages disrupting flights, financial devastation for federal workers, and mounting operational shortages at the Social Security Administration, the shutdown is increasingly impacting every corner of the US. But researchers, former and current government workers, and federal technology experts warn that gaps in foundational activities during the shutdown—things like system patching, activity monitoring, and device management—could have real effects on federal defenses, both now and for years to come.

“A lot of federal digital systems are still just running in the cloud throughout the shutdown, even if the office is empty,” says Safi Mojidi, a longtime cybersecurity researcher who previously worked for NASA and as a federal security contractor. “If everything was set up properly, then the cloud offers an important baseline of security, but it’s hard to rest easy during a shutdown knowing that even in the best of times there are problems getting security right.”

Even before the shutdown, federal cybersecurity workers were being impacted by reductions in force at agencies like the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency—potentially hindering digital defense guidance and coordination across the government. And CISA has continued cutting staff during the shutdown as well.

In a statement, spokesperson Marci McCarthy said “CISA continues to execute on its mission” but did not answer WIRED’s specific questions about how its work and digital defenses at other agencies have been impacted by the government shutdown, which she blamed on Democrats.

The government’s transition to the cloud over the last decade, as well as increased attention to cybersecurity in recent years, does provide an important backstop for a disruption like a shutdown. Experts emphasize, though, that the federal landscape is not homogenous, and some agencies have made more progress and are better equipped than others. Additionally, missed and overlooked digital security work that accumulates during the shutdown will create a backlog when workers return that could be difficult to surmount.



Source link

Continue Reading

Tech

Don’t Sleep on This Brooklinen Flash Sale

Published

on

Don’t Sleep on This Brooklinen Flash Sale


Winter bedding is different from summer bedding—thicker, loftier, softer, cozier—and now’s the perfect time to upgrade thanks to Brooklinen’s Flash Sale. We test a lot of bedding at WIRED for our numerous sleep-related buying guides, and Brooklinen is mentioned in nearly all of them. Its bedding is high-quality, aesthetically pleasing, and functions like it should. The brand hosts relatively frequent sales, but it’s rare that so many of our top picks are discounted at the same time. Many of our favorite bedding items we’ve hand-tested on our own beds are on sale through November 10. If you’re in the market for new sheets, quilts, or even a down comforter, we’ve highlighted our recommendations below.

Good bedding starts with good sheets. You can get 20 percent off the Luxe Sateen Core Sheet set in 21 colors across six sizes; they’re some of our favorite sateen sheets thanks to their silky, cooling texture and thick, quick-to-warm weave. They’re slick and slinky, and they warm up faster than traditional cotton sheets. If you don’t love sateen or you don’t need the warmth it provides, there’s also a deal on crispy, crinkly percale sheets that WIRED bedding expert Nena Farrell recommends.

Brooklinen

Luxe Sateen Core Sheet Set

We like these silky, warm sateen sheets more than many others we’ve tried. They’re a better pick if it gets cold outside.

Brooklinen

Percale Core Sheet Set

These super-crisp sheets are cooling, so better suited to climates that don’t get as cold—and are available in an organic version for a bit more money.

Once you’ve upgraded your sheets, top them with a down comforter or quilt. For folks in colder climates, the Brooklinen All-Season Down Comforter ($60 off) is a worthy choice. I tested it during the coldest months of the year in northern Illinois, and it kept me plenty warm while offering that classic, crinkly, hotel-like experience. The baffle box construction keeps the down evenly dispersed, and it’s lofty without feeling too lightweight. You could also go with the pricier ultra-warm option, but that was almost too warm for me. It’d be nice if you need a heavy comforter or you run very cold. For additional blanket options, Brooklinen’s AirWeave line has a few contenders on sale, all of which I’ve liked.

  • Courtesy of Brooklinen

  • Photograph: Louryn Strampe

Brooklinen

All-Season Down Comforter

This classic, hotel-like down comforter is soft, warm, and breathable.

Brooklinen

Airweave Cotton Quilt

This soft, fluffy quilt has a pleasing waffled exterior and adds extra warmth to your sleep setup.

Brooklinen

Airweave Crinkle Cotton Bed Blanket

This lightweight blanket is great to have around for extra-cold nights where you just need a bit more weight. It’s breathable but still warm.


Power up with unlimited access to WIRED. Get best-in-class reporting and exclusive subscriber content that’s too important to ignore. Subscribe Today.



Source link

Continue Reading

Tech

Denmark’s government aims to ban access to social media for children under 15

Published

on

Denmark’s government aims to ban access to social media for children under 15


Caroline Stage, Danish Minister for Digitalization and representatives from the agreement parties attends a press conference about a new political agreement for better protection of children and young people online, in Copenhagen, Friday, Nov. 7, 2025. Credit: Thomas Traasdahl/Ritzau Scanpix via AP

Denmark’s government on Friday announced an agreement to ban access to social media for anyone under 15, ratcheting up pressure on Big Tech platforms as concerns grow that kids are getting too swept up in a digitized world of harmful content and commercial interests.

The move would give some parents—after a specific assessment—the right to let their children access from age 13. It wasn’t immediately clear how such a ban would be enforced: Many tech platforms already restrict pre-teens from signing up. Officials and experts say such restrictions don’t always work.

Such a measure would be among the most sweeping steps yet by a European Union government to limit use of social media among teens and younger children, which has drawn concerns in many parts of an increasingly online world.

Speaking to The Associated Press, Caroline Stage, Denmark’s minister for digital affairs, said 94% of Danish children under age 13 have profiles on at least one social media platform, and more than half of those under 10 do.

“The amount of time they spend online—the amount of violence, that they are exposed to online—is simply too great a risk for our children,” she said, while praising as “the greatest companies that we have. They have an absurd amount of money available, but they’re simply not willing to invest in the safety of our children, invest in the safety of all of us.”

No rush to legislation, no loopholes for tech giants

Stage said a ban won’t take effect immediately. Allied lawmakers on the issue from across the who make up a majority in parliament will likely take months to pass relevant legislation.

“I can assure you that Denmark will hurry, but we won’t do it too quickly because we need to make sure that the regulation is right and that there is no loopholes for the tech giants to go through,” Stage said. Her ministry said pressure from tech giants’ business models was “too massive.”

It follows a move in December in Australia, where parliament enacted the world’s first ban on social media for children—setting the minimum age at 16.

That made platforms including TikTok, Facebook, Snapchat, Reddit, X and Instagram subject to fines of up to 50 million Australian dollars ($33 million) for systemic failures to prevent children younger than 16 from holding accounts.

Officials in Denmark didn’t say how such a ban would be enforced in a world where millions of children have easy access to screens. But Stage noted that Denmark has a national electronic ID system—nearly all Danish citizens over age 13 have such an ID—and plans to set up an age-verification app. Several other EU countries are testing such apps.

“We cannot force the tech giants to use our app, but what we can do is force the tech giants to make proper age verification, and if they don’t, we will be able to enforce through the EU commission and make sure that they will be fined up to 6% of their global income.”

Aiming to shield kids from harmful content online

Many governments have been grappling with ways of limiting harmful fallout from online technologies, without overly squelching their promise. Stage said Denmark’s legislative push was “not about excluding children from everything digital”—but keeping them away from harmful content.

China—which manufacturers many of the world’s digital devices—has set limits on online game time and smart-phone time for kids.

Prosecutors in Paris this week announced an investigation into allegations that TikTok allows content promoting suicide and that its algorithms may encourage vulnerable young people to take their own lives.

“Children and young people have their sleep disrupted, lose their peace and concentration, and experience increasing pressure from digital relationships where adults are not always present,” the Danish ministry said. “This is a development that no parent, teacher or educator can stop alone.”

The EU’s Digital Services Act, which took effect two years ago, forbids children younger than 13 to hold accounts on social media like TikTok and Instagram, video sharing platforms like YouTube and Twitch, and sites like Reddit and Discord, as well as AI companions.

Many social media platforms have for years banned anyone 13 or under from signing up for their services. TikTok users can verify their ages by submitting a selfie that will be analyzed to estimate their age. Meta Platforms, parent of Instagram and Facebook, says it uses a similar system for video selfies and AI to help figure out a user’s age.

TikTok said in an email that it recognizes the importance of Denmark’s initiative.

“At TikTok, we have steadfastly created a robust trust and safety track record, with more than 50 preset safety features for teen accounts, as well as age appropriate experiences and tools for guardians such as Family Pairing,” a tool allowing parents, guardians, and teens to customize safety settings.

We look forward to working constructively on solutions that apply consistently across the industry,” it added.

Meta didn’t respond immediately to requests for comment from the AP.

“We’ve given the tech giants so many chances to stand up and to do something about what is happening on their platforms. They haven’t done it,” said Stage, the Danish minister. “So now we will take over the steering wheel and make sure that our children’s futures are safe.”

© 2025 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed without permission.

Citation:
Denmark’s government aims to ban access to social media for children under 15 (2025, November 7)
retrieved 7 November 2025
from https://techxplore.com/news/2025-11-denmark-aims-access-social-media.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.





Source link

Continue Reading

Trending