Trying to Be Everything to Everyone: Let’s Talk About Burnout
Reviews trying to Be Everything to Everyone: Lets Talk About Burnout and evaluates key implications for security practitioners.
Summary
## Overview In the presentation "Trying to Be Everything to Everyone: Let’s Talk About Burnout," speaker Stacy Thayer addresses the psychological and systemic causes of burnout, specifically examining how it manifests within the information security industry. Thayer notes her background in the security community—starting from calling local BBSs and attending 2600 meetings in high school, founding the SOURCE security conferences, working at companies like Veracode and Netography, and earning an MBA alongside a PhD in clinical and organizational psychology. Currently serving as an adjunct professor of cyberpsychology at Norfolk State University, Thayer focuses on the intersection of human psychology and technology, examining issues such as employee engagement, depression, anxiety, and burnout in workplace environments.
## Definition and Interpersonal Origins of Burnout Thayer highlights the clinical definition of burnout: a psychological syndrome resulting from chronic emotional and interpersonal stressors on the job. She emphasizes that burnout is rarely driven solely by the core technical tasks or the original job description an individual applied for (e.g., working with computers). Instead, it is predominantly fueled by interpersonal dynamics—relationships with colleagues, managers, and workplace leadership.
## Dimensions of Burnout and Cynicism in Security Referencing Christina Maslach’s framework, Thayer details the three standard dimensions through which burnout is expressed: - **Emotional Exhaustion:** Being physically and mentally overextended, tired, and depleted of emotional and cognitive resources. - **Cynicism (Depersonalization):** Experiencing feelings of anger, detachment, indifference, resentment, and an attitude of complete disengagement (e.g., feeling that "the whole place could burn" and not caring). - **Reduced Professional Efficacy:** Experiencing diminished satisfaction or self-efficacy regarding work performance, characterized by feelings of inadequacy, imposter-like dread, or anxiety over impending termination despite past career success.
Thayer highlights findings from a collaborative research study conducted with Jack Daniel on burnout within the security industry. The study identified that professionals in cybersecurity most commonly express burnout through **cynicism**—manifesting as anger, resentment, and total emotional detachment—distinguishing it as the primary response pattern in the field compared to other environments.
## The Holistic Impact and Spillover Effects Thayer argues that burnout must be examined holistically rather than in isolation from the rest of an individual's life. Because workers are whole individuals, the frustrations, exhaustion, and perceived failures experienced at work inevitably spill over into personal and domestic life: - Workplace distress frequently triggers a "snowball effect," leading individuals to take out anger and exhaustion on partners, children, and friends. - Struggling at work compounded by perceived failures at home (such as neglecting domestic chores or being unable to engage with family) creates a compounding cycle of negative self-evaluation, causing individuals to feel like a "lousy partner" or a "bad parent." - The systemic pressure of trying to fulfill every role—"trying to be so many things to so many people"—ultimately depletes personal reserves across all domains of life.
Related talks
RSAC Cybersecurity·40 min
Security researchers examine technical aspects of Get Rich or Get Hunted Trying: Uncovering Large Scale Fraud Operations.
Black Hat·45 min
Industry experts analyze emerging threats surrounding Finding Our Path: How We're Trying to Improve Active Directory Security.
IEEE Symposium on Security and Privacy·17 min
Analysts investigate attack surfaces and defenses concerning I Think They're Trying to Tell Me Something: Advice Sources and Selection for Digital Security.


