Absenteeism is repeated or prolonged absence from work, training, or other required activities. In cyber security, it matters because security operations depend on continuity: patch cycles, incident monitoring, access reviews, and user awareness training all lose effectiveness when key people are repeatedly unavailable.
Attackers can benefit from absenteeism in indirect ways. A missed shift can delay alert triage, a skipped training session can leave staff unaware of phishing tactics, and chronic absence can create gaps in approval chains or endpoint maintenance. Defenders watch absenteeism as an operational risk indicator, then reduce its impact with cross-training, documented runbooks, backup coverage, and automated controls that keep security tasks moving even when personnel are out.