Ransomware Is Driving Cyber Security Professionals To Consider Quitting

Persistent ransomware threats and looming, large-scale attacks are pushing some security professionals towards leaving their chosen career. Cyber security has become a hot button issue for businesses around the world, particularly ransomware. The cyber threat has become common threat for every type of business.

Now, a report by cyber security company Deep Instinct has found that 46% of senior and executive-level cybersecurity professionals have considered quitting the industry due to stress. 

Ransomware is a type of malware that prevents you from accessing your computer, or the data that is stored on it. The computer itself may become locked, or the data on it might be stolen, deleted or encrypted. Typically, victims asked to contact the attacker via an anonymous email address or follow instructions on an anonymous web page, to make payment. The payment is usually demanded in a crypto currency, most often Bitcoin, in order to unlock your computer, or access your data. 

The cyber security industry is stretched thin. Ransomware attacks are now so prolific that some companies simply cannot help every newly hacked victim get back online and the chronic shortage of skilled workers means no immediate prospect of relief.

According to Deep Instinct, “More than 90% of cyber security professionals are stressed in their role   Nearly half of the respondents (46%) have thought about quitting the industry and stress levels are increasing across all sectors,” says the Report.  

Deep Instinct's Report is based on the responses of 1,000 senior cybersecurity professionals from companies in the US, UK, Germany and France. All interviewees worked for businesses with 1,000 employees or more, and for businesses with annual revenues of at least US $500m across financial services, retail and eCommerce, healthcare, manufacturing, public sector, critical infrastructure, and technology. 

The more senior the cyber security role, the more stressful the job   A significant proportion of professionals concede that stress is negatively   impacting their ability to do their job.   

“There appears to be a widespread adoption of completely counter-productive   measures, such as switching off alerts because cyber security teams find them to be overwhelming   Paying off the ransomware criminals is in the aftermath of an attack results in  trouble-free consequences in just 16% of cases... We’ve identified that more cyber security professionals than ever are seriously considering leaving the industry permanently because of these pressures, with potentially catastrophic consequences for the organisations that rely on their vigilance." says the Report.

This is being driven by an "unrelenting threat from ransomware", as well as supply chain attacks on a scale similar to the 2020 SolarWinds attack and the 2021 Kaseya ransomware attack and both have had severe consequences for organisations attacked, Deep Instinct found.

 The burden of preventing such attacks weighs heavily on those tasked with keeping networks and wider organisational systems secure

More than 90% of cyber security professionals are stressed in their roles, with a "significant proportion" of professionals conceding that this is negatively impacting their ability to do their jobs. Those in leadership positions are likely to be feeling pressures of the industry more acutely, the report found: one in three C-Suite executives, including CISOs, CTOs, ITOs and IT strategy directors, said they were 'highly stressed'. 

Cyber security problems have been exacerbated by the move to remote working, which has made network security more challenging for organisations. "Senior cybersecurity executives acknowledge that their stress levels are impacting decision-making and can have implications for the security posture of companies," the report added. 
"The stress we're seeing across the cyber industry appears to be accelerating the exodus of talented people from the industry: a particular challenge when many cybersecurity defences and mitigation processes are human-dependent, requiring constant monitoring and intervention."

"Without a singular focus on one type of attack, resources are stretched thin and its obvious to see how a SecOps team may feel deflated against the challenges they face." While organisations are typically advised not to pay hackers in exchange for encrypted data, cyber security professionals are doing so in order to avoid downtime and the associated reputational damage should the attack become public.

More than a third (38%) of survey respondents admitted to both experiencing a ransomware attack and paying the ransom in exchange for the decryption key, compared to 62% that didn't pay. A big problem is that paying hackers off does not guarantee the safe return of company data:

  • 46% of those who paid said records or sensitive information was exposed regardless.
  • 45% were unable to restore all their data
  • 23% of respondents were hit by a subsequent extortion demand after paying the ransom.

Working in cyber security is a hard job, exacerbated by the long, stressful hours that cyber security incident responders have to spend putting out the fires that ransomware cause to ignite 

Worse, the cyber security field is very short-staffed with  74% of organisations reporting that a lack of cyber security skills has had an effect their organisation, while only 9% of millennials have reportedly expressed interested in the industry.

Deep Instinct:       NCSC:     CheckPoint:       Proofpoint:       NBC:       ZDNet:    Tech.co

You Might Also Read: 

Overcoming The Obstacles Caused By The Great Resignation:
 

« What To Look For In A Cyber Essentials Assessment Partner
Iranian Hackers Try Intercepting Israeli & US Government Emails »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

BackupVault

BackupVault

BackupVault is a leading provider of completely automatic, fully encrypted online, cloud backup.

EfficientIP

EfficientIP

EfficientIP helps organizations drive business efficiency through agile, secure and reliable network infrastructures.

Qualys

Qualys

Qualys is a pioneer and leading provider of cloud security and compliance solutions.

Usenix

Usenix

Usenix brings together the community of engineers, system administrators, scientists, and technicians working on the cutting edge of computing.

Data Security Council of India (DSCI)

Data Security Council of India (DSCI)

DSCI is a premier industry body on cyber security and data protection in India, committed to making the cyberspace safe, secure and trusted.

Wind River

Wind River

Wind River delivers the technology and expertise that enables the deployment of safe, secure, and reliable intelligent connected systems.

Intelligent Waves

Intelligent Waves

Intelligent Waves holds and manages contracts to provide an array of intelligence, operational, communications and IT support to the USG in austere, forward-deployed, hazardous duty environments.

Brainloop

Brainloop

Brainloop's security architecture enables you to work on and distribute strictly confidential documents both within and beyond the firewall.

totemo

totemo

totemo provides security solutions for email encryption, secure managed file transfer and secure mobile communication.

IoT Defense

IoT Defense

IoT Defense (IOTD) is a cybersecurity and networking company building solutions that enable the protection of networks and the ever-increasing prevalence of IoT devices.

WiJungle

WiJungle

WiJungle is an Indian Cyber Security Company that develops and markets a unified network security gateway solution.

Combined Selection Group (CSG)

Combined Selection Group (CSG)

CSG are Global Talent Experts, we operate across 7 specialist sectors, including Information Technology and Cybersecurity, and take a pro-active approach to executive search and headhunting.

Logic Supply

Logic Supply

Logic Supply is a global industrial PC company focused on hardware for the IoT edge. We design highly-configurable computers engineered for reliability.

In-Sec-M

In-Sec-M

In-Sec-M is a non-profit organization that brings together companies, learning and research institutions, and government actors to increase competitiveness of the Canadian cybersecurity industry.

Texas A&M Cybersecurity Center

Texas A&M Cybersecurity Center

Texas A&M Cybersecurity Center is dedicated to combating adversaries who desire to harm our citizens, our government, and our industry through cyber-attacks.

Ergo

Ergo

Ergo is a world-class IT Partner of choice, leveraging the latest technology available in cloud, mobility, big data, analytics, and social media.

HashDit

HashDit

HashDit products and services focus on helping build a safe ecosystem for both protocol users and smart contract developers on BNB Chain.