This document discusses mental health issues in the information security field. It begins by defining mental health issues and mental illness, providing examples of each. It notes that mental health issues are a societal problem, not just an issue in IT, but that the IT field may face additional stressors. It provides examples of individual and organizational stressors security professionals face. The document suggests signs to look for that may indicate poor mental health or emerging illness in colleagues. It concludes by offering tips on supporting others and lists additional phone and online mental health resources.

1. Classified as Public
MENTAL HEALTH IN
INFORMATION SECURITY
IT’S TIME TO TALK
SIMON HARVEY
SCF CISSP CISM CCSP CIPM & HUMAN

2. Classified as Public
I’m scared of their forms.
simon@cybercon ~ % whoami
• A “normal” InfoSec & Privacy Architect/Consultant
• Mental Health First Aider/Course Instructor
• NOT a medical or mental health professional
• Advice and examples, if any, are general in nature
and intended as such.
• If you are affected by this topic, please seek
professional advice.
• Your Doctor
• Contacts on the final slide
The legal types made me say this

3. Classified as Public
All views are my own, based upon personal
observations and experience.
• I am not representing anyone else,
including, but not limited to:
• my employer, past, present or future
• any organisation I volunteer for
• anyone mentioned in this talk
• The buck stops with me.
• TLP: GREEN (unless otherwise noted)
• Chatham House Rules for anything said by the
audience (for safety)
• Media – please consult me before publishing
• Slides will be made available (contact details
on final page)
I’m really scared of their forms.
Corporate Affairs (and the insurers) made me say this

4. Classified as Public
Mental Health issue
• A decline of “Good” Mental Health
• Symptoms of mental health becoming
poorer
• Some symptoms of Mental Illness
What is a Mental Health issue?
Mental Illness
• A diagnosable medical condition by a
diagnosed by a qualified medical
professional that causes disability
• Affects a person’s thinking, emotional state
and behavior
Disability: “Disrupts the persons ability to work, carry out daily activities and engage in satisfying
personal relationships”
– World Health Organisation
SOURCES: ABS.NATIONAL SURVEY OF MENTAL HEALTH & WELLBEING 2007; AUSTRALIAN INSTITUTE OF HEALTH AND
WELFARE STUDY, 2011; MENTAL HEALTH FIRST AID AUSTRALIA TRAINING / MANUAL 4TH
ED.

5. Classified as Public
Illustrative Examples
What is a Mental Health issue?
ADAPTED FROM MENTAL HEALTH FIRST AID AUSTRALIA TRAINING / MANUAL 4TH ED; MHFA ENGAGING LEADERS WORKSHOP
Issue (Becoming Unwell à)
• Depression
• Suicidal thoughts (fleeting)
• Anxiety
• Psychosis
• Substance use
• Alcohol
• Drugs
• Prescription
• Non-Prescription
Medication
• Gambling problems
• Eating disorders
Positive, healthy
functioning
Severe impact on
everyday functioning
Illness/Crisis Situation
• Severe Depression
• Suicidal thoughts &
behaviours
• Self-Injury
• Severe panic attacks
• Severe psychotic states
• Post-traumatic events
• Aggressive behaviours
• Severe effects from
substance use
• Psychological addiction
• Severe effects from eating
disorders
Frequency, Duration & Severity

6. Classified as Public
Is this just an issue in IT?
No, its societal …
• 3rd biggest cause if “disease burden” in
Australia
• “cause of Premature Death or
Disability”
• second only to Cardiovascular
Disease/Cancer
• Biggest cause of disability … by far.
• 65% of people suffering don’t receive
professional help.
• 2021 AIHW Studies show an increasing
trend: https://www.abs.gov.au/statistics/health/mental-
health/national-study-mental-health-and-wellbeing/latest-
release
SOURCE: HTTPS://STATS.MHFA.COM.AU/
Adults (2009)
Young Adults 16-
24 (2009)
Adolescents
12-17 (2015)
Older Adults 65+
(2009)

7. Classified as Public
Is this just an issue in IT?
… but more prevalent in our industry.
• Further breakdowns:
• https://www.beyondblue.com.au/media
/statistics
• Some recent small-scale studies in the US
and EU (used in marketing material by
vendors) showing workplace stress in
Security / IT
• Not seen any in Australia (hint, hint)
SUMMARISED FROM: CREATING A MENTALLY HEALTHY WORKPLACE RETURN ON INVESTMENT ANALYSIS (PWC FOR BEYONDBLUE), ANALYSIS OF DATA FROM THE 2007
NATIONAL SURVEY OF MENTAL HEALTH AND WELLBEING (IBID.):
https://www.headsup.org.au/docs/default-source/resources/beyondblue_workplaceroi_finalreport_may-2014.pdf

8. Classified as Public
Illustrative Example: Cybersecurity Professionals
Individual Stressors
• Personality Types
• Imposter Syndrome?
• Nature and variety of the work we do?
• Red vs. Blue?
• Focus on “negative" Risk Management
• Consulting & Management &
Operations
• Our little silo …
• Cyber Cyber Cyber Cyber Cyber Cyber

9. Classified as Public
Illustrative Example: Cybersecurity Professionals
Organisational & External Stressors
• 2020/21/22/23…
• Threat Landscape
• AI/ML! Yay!
• Regulatory and Environmental Changes?
• Organisational or Industry Culture?
• “Why can’t you just …”
• OMG WTF did I just find …
• Supplier/Client Risk and Accountability?
• 24 x 7 x 365 … are we exhausted?
• New! Shiny! Technology!
• “Business Prevention Department”
• Resourcing (or lack of it)
• Chief Blame Officer/ Chief Incidental
Sacrificial Officer

10. Classified as Public
Is your Workplace contributing to mental health problems?
• Overstretched Teams
• Burnout / Fatigue
• Psychological Safety in the Workplace
• Workplace Health & Safety Legislation now
includes Psychosocial Hazards
• https://www.safeworkaustralia.gov.au/safety-topic/managing-
health-and-safety/mental-health
• Guidance: https://www.safeworkaustralia.gov.au/doc/model-
code-practice-managing-psychosocial-hazards-work
• Legislation: https://www.safeworkaustralia.gov.au/law-and-
regulation/whs-regulators-and-workers-compensation-
authorities-contact-information
• “The Great Resignation”
• From Employers? From Career Paths?
• From Management? Leadership Styles?
• From 24/7 “flexible”, ongoing harm?
• “Quiet Quitting”
DIAGRAM ADAPTED FROM: MENTAL HEALTH FIRST AID AUSTRALIA: ENGAGING LEADERS WORKSHOP, HTTPS://WWW.SAFEWORKAUSTRALIA.GOV.AU/SAFETY-TOPIC/MANAGING-HEALTH-AND-
SAFETY/MENTAL-HEALTH/PSYCHOSOCIAL-HAZARDS; HTTPS://COMMUNITY.MHFA.COM.AU/PROMOTING-POSITIVE-MENTAL-HEALTH-PRACTICES-IN-THE-WORKPLACE/

11. Classified as Public
A side note: Cybersecurity Solutions vs. Problems
People make mistakes when under pressure.
ß80% of Security Solutions
Focus on these guys
ß80% of Security Problems
caused by these guys
Under resourced
Under funded
Poorly motivated
Disempowered
Underpaid
Mis-focused
Bored
Contributor: Poor Mental Health?
ADAPTED FROM: “SATELLITES OF LOVE”, ERIC PINKERTON, CRIKEYCON 2017. HTTPS://WWW.YOUTUBE.COM/WATCH?V=EA68HHRLS9Q

12. Classified as Public
Possible Signs of Poor Mental Health/Emerging Illness
DIAGRAM ADAPTED FROM: TRISH THOMAS, HTTPS://WWW.LINKEDIN.COM/FEED/UPDATE/URN:LI:ACTIVITY:7056778912143454208/ AND HTTPS://COMMUNITY.MHFA.COM.AU/LOOKING-OUT-
FOR-THOSE-WHO-ARE-NOT-COPING/
Look out for these in your colleagues … and yourself

13. Classified as Public
Some tips
• Check within your own organisation for enablement/support (e.g.
EAPs, ESS, MSS, training ... )
• Keep an eye out for each other, and ask (if you feel comfortable)
• Peers, managers, reports, clients, service providers, colleagues, friends,
everyone.
• Look for changes in people’s day-to-day behaviour.
• Confidentiality and Trust – don’t force the issue
• Encourage them to seek appropriate help
• (put “Emergency” Phone Numbers in your Phone)
• https://www.beyondblue.org.au/get-support/support-someone/
• https://www.beyondblue.org.au/get-support/support-someone/how-
to-talk-to-someone-you-re-worried-about#talking-to-someone-at-
work
So, what can we do?

14. Classified as Public
Additional Phone & Online Support &
Resources:
• 13Yarn: 13 92 76
• 1800 RESPECT: 1800 737 732
• BeyondBlue: 1300 22 46 36
www.beyondblue.com.au
• Black Dog Institute:
www.blackdoginstitute.org.au
• Care Leavers Australia Network: 1800 008 774
• Head to Health: www.headtohealth.gov.au
• Headspace: 1800 650 890 &
www.headspace.org.au
• HealthDirect Australia: 1800 022 222
• Kids Helpline: 1800 551 800
• Lifeline: 131 114
• Mensline: 1300 789 978
• Qlife: 1800 184 527
• SANE Australia: 1800 187 263
• Suicide Call Back Service: 1300 659 467
Tip: Put the above (and the CATTs) in your phone
with the surname EMERGENCY
Support is available:
• Your GP
• Your Employer’s EAP / ESS / MSP
• Cybermindz.org
• BlueHackers.org
Workplace Employee &
Employer Resources:
• Mentally Healthy Workplace
Alliance www.headsup.org.au
Crisis Assessment and
Treatment Teams
• 000 (for actual or imminent harm)
• QLD Health 24/7 Mental Health Access:
1300 MH CALL (1300 642 255)
• VIC: NURSE-ON-CALL on 1300 60 60 24
• Interstate CATTs: see
https://www.healthdirect.gov.au/crisis-
management

15. Classified as Public
THANK YOU
https://lnk.bio/pingudownunder
Slides: https://www.linkedin.com/in/simonharvey/