IBM Cyber Response Chief: After 26 Years in Incident Response, I'm More Concerned About Burnout Than AI
I’ve spent two and a half decades responding to cyber incidents or leading teams of people who do. Over that time, I’ve watched the threat landscape evolve from opportunistic attacks and early internet worms to organized cybercrime, ransomware syndicates, and nation-state campaigns. Each major shift brought new technology, new tactics, and new challenges for defenders.
TL;DR
- AI-enabled cyberattacks have increased significantly, accelerating the threat landscape.
- Incident response is a human-centric profession, and the speed of AI threats places immense pressure on defenders.
- The human cost of cyberattacks, including stress, burnout, and strained relationships, is often overlooked.
- Workforce sustainability is a major challenge, with many responders facing simultaneous attacks and daily stress.
- The conversation needs to shift from having enough people to enabling existing teams to operate more effectively.
- Organizations must invest in training, resources, and supportive environments to help security teams adapt to new technologies.
- Leadership's role is crucial in creating an environment where technology amplifies human expertise and reduces burden.
- Resilience starts with people; retention, well-being, and sustainable workload management are paramount.
- Broader conversations are needed about workforce resilience, burnout, and operational design alongside adversarial AI.
- Supporting the people on the digital front lines is a critical security investment for long-term resilience.