CISO Burnout – Epidemic, Endemic, or Simply Inevitable?

CISO burnout is increasing, and the piece asks whether we are simply more aware of the condition or if demands on CISOs have made burnout the inevitable result. It notes that in 2019 burnout was defined by the World Health Organization as an occupational phenomenon, and by 2025 it has become endemic within cybersecurity, affecting both team members and CISOs alike.

The article outlines how burnout differs from a mere headache, describing it as severe and chronic, with causes such as constant firefighting, loneliness of leadership, and accountability without corresponding authority. It also highlights the overlap with PTSD and neurodivergence, and discusses the idea that the CISO role has shifted toward being a Chief Crisis Officer, with endless stress from unknown sources.

Prevention and cure are discussed through iRest, a yoga-based protocol developed by Dr Richard Miller, with studies noting sleep quality among CISOs to be about two and a half times worse than average. Written by Kevin Townsend, November 3, 2025.