Saturday, July 24, 2021

Top 5 reasons not to use fear to encourage security compliance


Security is important in any organization, but getting employees to follow protocol can be a challenge. Tom Merritt offers five reasons why using fear-based motivation techniques is not ideal.

Oh, these people who are using insecure passwords, clicking open phishing emails and installing malicious apps–why don’t they understand? We’ll show them, right? If you don’t follow the security protocols, you’re in for it. “Fear will keep the local systems in line.” Wait… Grand Moff Tarkin said that in Star Wars. It didn’t work out so well for him. Maybe fear isn’t the best way to get your staff to be more secure. Here are five reasons why you shouldn’t use fear to encourage security compliance.

SEE: Social engineering: A cheat sheet for business professionals (free PDF) (TechRepublic)

  1. Fear fades. You burn out and get used to it. “Yeah, yeah, yeah, bad things are gonna happen. I heard it the first thousand times.” A much better tactic is to get people to want to be secure.
  2. People are suspicious of fear mongering. When the fear fades, the skepticism sets in. “I bet those security pros don’t know what they’re talking about. They’re just cashing a paycheck. I’ve never been hacked!” Once you lose trust you’re not going to get compliance.
  3. Fear can also have other side effects. Punishment can bring limited compliance in one’s employees, not understanding and adaptability. This can end up lowering productivity and innovation. “I’d better just follow the rules, not try anything new.”
  4. Fear can lead to cheating and shortcuts. The classic case? You tell staff to use long passwords, don’t reuse them, and don’t write them down. How are they supposed to do all that and remember their passwords? Maybe just give up on following the rules since you’ll get in trouble anyway. A better idea might be to give them tools for better password management.
  5. Fear demotivates. Yelling, punishing, and threatening does not make for a thriving workplace culture. Getting people on your side and wanting to improve security is much more sustainable.

Listen, I’m not going to punish you if you don’t pay attention to these five things. Right? We both want better security compliance, so think it over.

Subscribe to TechRepublic Top 5 on YouTube for all the latest tech advice for business pros from Tom Merritt.

Also see

cognitivehacking.jpg

Image: iStockphoto/fizkes



Source link

MORE Articles

Arm Reveals Flexible, Non-Silicon PlasticArm Chip

Arm and PragmatIC revealed a new microprocessor, PlasticArm, built with "metal-oxide thin-film transistor technology on a flexible substrate" instead...

How to watch Surfing at Olympics 2020: key dates, schedule, free live stream and more

 Set to make a splash in Tokyo, surfing is one of five brand-new sports to make its Olympic debut at the 2020 Games....

ఎంపీటీసీకి కేసీఆర్ ఫోన్-ఆ కార్యక్రమానికి ఆహ్వానం-ఈటల రాజేందర్ చిన్నోడు,పట్టించుకోవద్దని కామెంట్…

హుజురాబాద్ ఉపఎన్నిక వేళ 'దళిత బంధు' పథకానికి శ్రీకారం చుట్టిన ముఖ్యమంత్రి కేసీఆర్... ఈ నెల 26న దానిపై తొలి అవగాహన కార్యక్రమం నిర్వహించనున్నారు. ప్రగతి భవన్ వేదికగా జరగనున్న ఈ కార్యక్రమానికి...

Second Hand Stress: कहीं आप दूसरों का तनाव तो नहीं झेल रहे, जान लें ये संकेत

तनाव एक नैचुरल मेंटल रिएक्शन है, जो विपरीत व मुश्किल परिस्थितियों के दौरान महसूस होता है. अत्यधिक तनाव लेना आपके मानसिक स्वास्थ्य के...

Stay Connected

98,675FansLike
224,586FollowersFollow
56,656SubscribersSubscribe