Burnout in Information Security

18
Burnout in Information Security NOT a "how-to" guide

description

Stress, burnout, rage, despair- all common experiences to many in the information security community. This panel will discuss the issues, compare and contrast them to other industries. We’ll also discuss how to recognize stress in ourselves and others, and steps that can be taken to combat it. We aren’t looking at medical or psychological cures, but rather what the average would call common sense approaches to dealing with stress in your life. We will start with a presentation of common stress and burnout issues and triggers encountered in information security. These factors can be internal (for example, some of the personality types drawn to the field), external (harassment by coworkers, lack of respect by business), and cultural (stereotypes of “geeks”). The discussion will continue with a look at other high stress careers and examine what (if anything) we can learn from them. Many of the commonly considered “high stress” occupations, such as law enforcement, medicine, and military have much more visceral activities and responses- this must be considered when attempting to transfer lessons from these occupations to infosec. Talk was delivered at Security BSides Las Vegas, 2011

Transcript of Burnout in Information Security

Page 1: Burnout in Information Security

Burnout in Information Security

NOT a "how-to" guide

Page 2: Burnout in Information Security

Burnout?

Page 3: Burnout in Information Security

Burnout?

Page 4: Burnout in Information Security

Burnout!

Page 5: Burnout in Information Security

Who we are

Martin McKeay

Josh Corman

Stacy Thayer, PhD

KC Yerrid

Gal Shpantzer

Jack Daniel

Page 6: Burnout in Information Security

We are here to help, but...

Moral support, that we can do. Clinical support, we can't do that. We are not therapists or counselors.

The psychologist on the panel is not your psychologist. Hell, we aren't even qualified bartenders. Which leads to a topic we need to discuss later.

Page 7: Burnout in Information Security

Let's not end up like this...

Page 8: Burnout in Information Security

GENDERMen = 90% Women = 7% Undisclosed= 3% AGE< 25 = 8%25-35 = 47%35-45 = 36%45-55 = 8%55+ = 1% TIME IN SECURITY INDUSTRY< 1 year = 4%1-3 years = 13%3-6 years = 19%6-10 years = 23%10-15 years = 29%15+ years = 11%

SURVEY: 400 RESPONDENTS

WHAT IS YOUR ROLEExecutive = 5%Senior Management = 8%Middle Management = 16%Non-Management = 59%Self-Employed = 6.8%Student = 6.1% LEVEL OF STRESS Extremely Stressed = 10%Very Stressed = 24%Moderately Stressed = 40%Mildly Stressed = 25%Not Stressed = 6% BIGGEST STRESSORS Job Satisfaction = 55%Family = 33%Finances = 43%Pwnage = 23%Social Relationships = 16%

Page 9: Burnout in Information Security
Page 10: Burnout in Information Security
Page 11: Burnout in Information Security

What Do You Like Best/Least About The Security Industry?

BEST CommunityLots to learn FunLots of opportunity Great Conferences InnovationGreat Challenges Always new things to learnReally Smart People

LEAST Elitism/Egos FUDSnobberyAttitude from ManagementPoliticsMedia HypeHaving to tolerate bad business decisionsSnobby "Rock Stars"

Page 12: Burnout in Information Security

Burnout: Two directions

Causes of burnout

- ?

- ?

- ?

- ?

Consequences of burnout

-Depression

-Financial losses

-Up to and including suicide

Page 13: Burnout in Information Security

Alcohol...

And other substances- can be abused. Yes, we're in Vegas, and partying. BUT, this is a problem for many. And we know it.

Page 14: Burnout in Information Security

Alcohol can lead to poor decisions

Page 15: Burnout in Information Security

Alcohol, drugs,and health

Much bigger problems than simply developing this kind of six-pack abs.

Page 16: Burnout in Information Security

What do you want to add or ask?

This is about all of us.

That includes you.

Page 17: Burnout in Information Security

Please participate

This is an ongoing project, please follow @secburnout on Twitter and watch for updates at secburnout.org

Page 18: Burnout in Information Security

Ending on a hopeful note

-Key messages:

-You're not alone, this happens to other people, even other hackers.

--Get help early and often.

-It won't be this bad forever.