Leadership

Balancing Senior Management and Board Expectations with CISO Burnout

Comment

Chief Information Security Officers carry an extraordinary load: always-on threat environments, regulatory scrutiny, tight budgets and the expectation of zero incidents. Burnout in the role is now well documented, and it is a governance risk in its own right — a tired, isolated CISO makes an organisation less safe.

Jenny looks at the mismatch between what boards and senior management expect of security leaders and what they equip them with. She advocates for clearer risk appetite statements, shared accountability for cyber risk across the executive team, realistic resourcing and a reporting rhythm that focuses on decisions rather than on volumes of technical detail.

She also speaks to CISOs directly: build allies, communicate in the language of risk and value, and protect your own resilience — a message that echoes her broader work on human risk and workplace well-being.

Key takeaways

  • CISO burnout is a governance risk, not just an HR issue.
  • Boards should set clear risk appetite and share accountability for cyber risk.
  • Decision-focused reporting and realistic resourcing protect both the CISO and the organisation.

Read the full article at SheLeadsTech Singapore

Comments

  • Be the first to share your thoughts.

Join the conversation

Enjoyed this article?

Subscribe for new articles, or invite Jenny to speak on this topic at your next event.