Good morning. Cyberattacks are a top concern for CFOs. However, cybersecurity professionals are feeling increased stress due to the complexity of the threat landscape and ongoing risks.
In a new report shared with CFO Daily, ISACA—a global association for IT governance, security, risk, and audit professionals—surveyed more than 3,800 cybersecurity experts. Two-thirds said their roles are more stressful than five years ago, and 63% named the complexity of today’s landscape as the top stressor. Nearly half (47%) cited high stress as the primary reason for attrition.
The survey found that 43% of respondents believe an attack on their organization is likely in the next year, yet just 41% are confident regarding incident-response capabilities. Additionally, 39% believe cybercrime is underreported, even when reporting is required.
The most common type of attack is social engineering (44%)—manipulation techniques that trick individuals into giving up confidential information—followed by 37% who noted exploited vulnerabilities (flaws or weaknesses in software, hardware, or network systems) and 36% said malware (malicious software or code). About one-third of cybersecurity professionals still reported an increase in incidents this year, according to the report.
