NCSC warns CISOs of staff burnout during Russia-Ukraine conflict

The National Cyber Security Centre (NCSC), the UK government’s cybersecurity arm and part of GCHQ, has urged businesses to prepare for the ‘long haul’ regarding increased cyber threats as a result of the Russia-Ukraine conflict. 

It has outlined eight key steps for IT firms to follow including ensuring their workforce are able to cope with the increased pressure whilst maintaining their wellbeing.

Paul Maddinson, NCSC Director for National Resilience and Strategy, said: “From the start of the conflict in Ukraine, we have been asking organisations to strengthen their cyber defences to help keep the UK secure, and many have done so.

”But it’s now clear that we’re in this for the long haul and it’s vital that organisations support their staff through this demanding period of heightened cyber threat.”

Cybersecurity expert Josh Yavor, CISO at Tessian, commented: “There is this unfortunate trend of heroism in the security industry. However, we often fail to acknowledge that the need for heroics usually indicate a failure condition and are not sustainable.

”Like any job function, security professionals have their limits and need to advocate for themselves and time constraints to avoid burnout.

”As leaders, it’s critical that CISOs are able to lead by example and to set their teams up for sustainable operational work. Heroics are sometimes unavoidable, but we should be accountable for ensuring they are not the norm.”