IBM X-Force incident response head Tony Kirtley warns that defender burnout is a bigger threat to cybersecurity than artificial intelligence.
Cybersecurity incident response experts face growing pressure as digital threat landscapes rapidly evolve. According to Fortune, IBM X-Force Head of Incident Response Tony Kirtley warns that defender burnout poses a more urgent challenge than artificial intelligence. Having spent 26 years responding to digital breaches, Kirtley emphasizes that incident response remains a fundamentally human profession.
Threat landscapes have shifted from early internet worms to organized cybercrime and ransomware syndicates. While industry discussions often highlight automated attacker capabilities, the human impact of machine-speed threats receives far less attention. Global research indicates that artificial intelligence-enabled cyberattacks increased by 56% over the past year.
Financial costs and recovery expenses dominate conventional discussions regarding major security incidents. However, the severe personal strain placed on incident responders threatens the long-term sustainability of the defense workforce. Analysts regularly make high-stakes decisions with incomplete information while working around the clock to restore compromised systems.
The human impact of machine-speed threats
Survey data reveals that 68% of incident responders regularly defend against two or more attacks simultaneously. Additionally, 67% of surveyed defenders report experiencing daily stress or anxiety associated with security operations. Hackers frequently escalate operational attacks during weekends and holidays, severely disrupting the personal lives of defenders.
Operating under continuous high pressure eventually exposes the physical and psychological limits of cybersecurity personnel. Leaders must shift organizational focus from headcount metrics toward enabling existing staff to operate more effectively. Even as companies deploy artificial intelligence at scale, ultimate defense success relies heavily on human expertise.
Security teams require dedicated time to experiment with new technologies before facing active operational crises. Organizations that invest in comprehensive training empower personnel to evolve alongside rapidly changing security landscapes. Management must cultivate operational environments where human judgment remains focused on complex strategic decisions.
Supporting digital defenders and workforce resilience
Effective leadership must reduce cognitive loads by eliminating repetitive operational tasks. Providing clearer context allows incident responders to spend less time gathering data and more time acting. Reducing administrative burdens ensures that advanced automation amplifies human expertise rather than exacerbating worker fatigue.
Long-term organizational resilience starts with prioritizing employee retention, personal wellbeing, and sustainable workload management. Encouraging continuous learning and providing opportunities to recharge between major security incidents prevents early career exit. Kirtley notes that allowing team members to pursue passionate research projects directly improves operational workflows.
Cyber leadership must broaden strategic discussions to include workforce sustainability alongside machine-speed threats. Supporting digital defenders on the front lines represents one of the most critical security investments available. While security technologies continue to evolve constantly, fundamental human limits remain constant across all operational environments.