Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


Due to the possibility of burnout and the associated costs, the CERT/CC recommends that CVD capability be established within a well-resourced team or teams specifically created for this task, rather than concentrating the responsibilities to a small team, or even a single person. Our suggestions above may be helpful to combat analyst burnout, but do not form an exhaustive list of possible actions.


< 7.2 Operational Security | 8. Open Problems in CVD >


  1. B. Rothke, "Building a Security Operations Center (SOC)," 29 Feb 2012. [Online]. Available: [Accessed 24 May 2017].
  2. S. Ragan, "Avoiding burnout: Ten tips for hackers working incident response," 30 April 2014. [Online]. Available: [Accessed 24 May 2017].
  3. S. C. Sundaramurthy, A. G. Bardas, J. Case, X. Ou, M. Wesch, J. McHugh and S. R. Rajagopalan, "A human capital model for mitigating security analyst burnout," in Proceedings of the Eleventh Symposium on Usable Privacy and Security (SOUPS 2015), July 2015.