EDITOR ’ S QUESTION

Kennet Harpsøe , Lead Security Researcher , Logpoint

With businesses inundated with evolving cyberthreats , organisations are racing to protect their assets and the pressure on Security Operations Centre ( SOC ) teams has reached unprecedented levels .

While a certain amount of pressure can drive

performance , the reality is that many security analysts are overwhelmed . With SOC teams facing an average of 4,484 alerts daily , the burden of manually triaging these alerts can consume up to three hours each day . This unsustainable workload not only leads to alert fatigue but also increases the risk of critical incidents slipping through the cracks . The fear of missing incidents , or FOMI , has become a prevalent concern . According to an October 2023 survey from Tines , 71 % of SOC analysts reported feelings of burnout and 60 % noted an increase in their workloads over the past year .

To combat this alarming trend , organisations must prioritise the wellbeing of their cybersecurity teams . One of the most effective strategies is to invest in automation technologies that can alleviate the manual workload faced by analysts . By automating routine tasks such as reporting and monitoring , we can significantly reduce the time spent on these less favourable aspects of the job . In fact , the aforementioned survey found that 65 % of analysts believe that half of their security tasks could be automated , which would not only enhance job satisfaction but also allow them to focus on higher-value operations .

Additionally , implementing advanced automated solutions can ensure that every alert is investigated , addressing the gaps highlighted by industry research . It can also reduce the number of false positives and help ease the burden on security analysts in that aspect . These solutions should incorporate threat intelligence and business context , transforming weak signals into meaningful investigations . By enhancing the efficiency of threat detection and case management , we can empower our analysts to respond more effectively to potential threats , ultimately reducing the stress associated with their roles .

Equally , fostering a supportive work environment is essential . This includes redistributing responsibilities to prevent any one individual from becoming overwhelmed and encouraging open communication about workload challenges . Regular check-ins and mental health resources can also play a vital role in supporting our teams .

Preventing burnout among cybersecurity professionals requires a multifaceted approach . By investing in automation , redistributing workloads , and fostering a supportive culture , we can create an environment where teams can thrive whilst ultimately safeguarding the organisation and its digital assets .

20 www . intelligentcxo . com