Full Report
ISACA identified factors such as heavy workload and long hours as the primary causes of stress, while there has been high turnover of IT professionals in the past two years
Analysis Summary
# Main Topic
Workforce retention crisis in the Information Technology (IT) sector, driven primarily by employee stress, burnout, and resulting high turnover rates, which exacerbates existing professional shortages.
## Key Points
- **Primary Stress Drivers:** Heavy workload (54%), long hours (43%), tight deadlines (41%), lack of resources (41%), unsupportive management (41%), and lack of appreciation (38%) are the biggest causes of stress/burnout for IT professionals according to an ISACA survey.
- **High Turnover:** There has been a high turnover of IT professionals over the past two years, particularly affecting younger workers (42% of those under 35 changed jobs). This is exacerbated by a lack of clear upward career paths (30%) and limited career opportunities (24%).
- **Implication:** High turnover is worsening the decades-long shortage of tech and cybersecurity professionals for businesses.
## Threat Actors
- No specific malicious threat actors (e.g., cybercriminals, APTs) are mentioned in relation to this workforce stress intelligence. The context focuses on the workforce itself as the subject of analysis.
## TTPs
- Not applicable. This report focuses on organizational/HR factors (workload, hours) rather than technical cyberattack TTPs.
## Affected Systems
- The global IT professional workforce, specifically spanning information security, governance, assurance, risk, privacy, and quality roles (ISACA members surveyed).
- Younger workers (Under 35) are the demographic experiencing the highest rate of job changes (42%).
## Mitigations
Based on ISACA/Chris Dimitriadis' comments, recommended strategies focus on retention:
- Ensuring the tech workforce feels supported, motivated, and invested in.
- Implementing better retention strategies, including establishing clear career growth pathways.
- Focusing on improving work-life balance for employees.
## Conclusion
The primary threat identified is organizational instability stemming from severe employee burnout leading to high turnover. This internal attrition compounds external cybersecurity staffing shortages. Mitigations must focus immediately on improving core working conditions (workload, hours, management support) and providing defined career mobility to retain skilled staff.