Analyst Burnout in the Cyber Security Operation Center - CSOC: A Phenomenological Study

摘要

If you are connected to the Internet, your device is susceptible to unwanted intrusions which lead to compromises where 89% of attacks are financially or espionage focused according to Verizon's 2016 Data Breach Investigations Report (Verizon, 2016). Cyber security that is a relatively new phenomenon has a variety of different suppliers, methods, and contexts with the mission to prevent intrusions and attacks from those that have malicious intentions. The people who work to identify these intrusions are the core of any cyber defense strategy and operation. Until the time that Artificial Intelligence -- AI will become the reasoning, logic, and action behind cyber intrusion detections it is necessary that Cyber Security Operation Centers (CSOC) be given the best analysts, management, tools, training, and working environment to enable these operations. The current state of cyber security from a resourcing perspective is that there is a critical shortage of cyber security skilled workers projected into 2020 (Vogel, 2016). It is within the CSOC environment that cyber security workers: analysts can and do become burned out from the daily activity of event analysis that affects analysis accuracy, one emotional and physical health, and the retention of cyber security professionals. The literature examined has revealed the problem to investigate further through a phenomenological interpretive analysis of the experiences of CSOC analysts as they experience burnout.