Infosec teams must be allowed to fail, argues Gartner

Gartner analysts argue that organizations should measure security effectiveness by rapid, rehearsed recovery rather than zero incidents, urging collaboration with the business to define tolerable impacts and develop well-practiced playbooks, especially for third-party-caused events. They emphasize structured shifts, stress detection training for CISOs, mental health debriefs, and even behavioral psychology support to reduce burnout and improve response quality. The guidance encourages openly acknowledging and learning from frequent, small incidents to build calm, continuous improvement in cyber defense.