登录查看更多内容

What do you do if your feedback on information security is not constructive?

由人工智能和领英社区提供技术支持

When you offer feedback on information security and it's met with resistance or ignored, it can be frustrating. You might feel like your expertise is being undervalued or that your concerns are not taken seriously. However, it's crucial to approach this situation strategically to ensure that the importance of secure practices is recognized and acted upon. By staying professional and persistent, you can help foster a culture that values information security and understands its significance in protecting organizational assets.

此文章中的业界达人

由社区从 6 条内容中精选。了解更多

1 Reflect First

Before reacting to the dismissal of your feedback, take a moment to reflect on your approach. Was your feedback clear and backed by solid examples? Did you communicate the potential risks effectively? Sometimes, the issue might not be with the message but how it's delivered. Ensure that your feedback is constructive, specific, and actionable. If you find that your initial feedback could be improved, consider rephrasing it to be more compelling and easier to understand.

添加您的观点

Engin ?ztürk

IT Specialist | Cybersecurity and Information Security Instructor | CSAP | CySA+| ISO 27001 LA | ISO 31000 Risk Mgt | ISO 21434 Automotive CS ||| Motivational Speaker, Trainer, Mentor
举报内容
If your feedback is not constructive, the problem is definitely with you. If this is a temporary case and you don't usually provide destructive feedback, you may be angry about something and tring to reflect this anger to your counterpart. This could be consistent miskates of your counterpart, your words not being taken into account, or anything else. If this happens all the time, this is a greater problem. Just keep in mind that people are not paying you to reflect your emotions on them (as destructive as you), and they need your help because they want to become better organization (as constructive as you should be).

已翻译

赞
Zuhaib Khurshid (CISSP, CISM)

??LinkedIn Top Voice | Cybersecurity Engineer/Consultant/Trainer | Sr. Cybersecurity Engineer @ Abbott
举报内容
In my experience, when feedback on information security isn't constructive, it's crucial to reflect first , ensuring your approach was clear and backed by solid examples. If necessary, rephrase your feedback to be more compelling and easier to understand. Seek allies who understand the importance of your feedback and can support your case. Escalate approprily if your feedback continues to be overlooked, presenting a clear case with evidence of potential risks and consequences.

已翻译

赞
Enis Aksu , CISSP

CISSP | CSAP | ISO27001 Lead Auditor | Threat Analyst III @ Sophos | Incident Responder | Cybersecurity Architect | Threat Hunter | Threat Intelligence | TryHackMe Top 2% | Cybersecurity Coach & Mentor
举报内容
If your feedback is not constructive, then it is destructive. We give feedback to make things better but not destruct. Therefore, we should be focusing on ‘expectation’, ‘problem’ and ‘possible resolution’. So that it will give those teams enough UX info to understand client expectations and the issues we have faced as clients. Also, resolution idea of ours may not fit to their architecture or not doable at all but it still gives them the idea of end-product we want.

已翻译

赞

2 Seek Allies

In the world of information security, having allies can make a significant difference. Look for colleagues who understand the importance of your feedback and can support your case. These allies can help reinforce your message and lend their credibility to your concerns. They might also offer different perspectives or solutions that you hadn't considered, which can strengthen your argument and make it more persuasive.

添加您的观点

3 Escalate Appropriately

If your feedback continues to be overlooked, it may be time to escalate the issue. This doesn't mean sounding the alarm without cause but rather following the proper channels to raise your concerns with higher management. When doing so, present a clear case with evidence of the potential risks and consequences of not addressing the security issues you've highlighted. It's vital to remain professional and avoid making it personal; focus on the facts and the importance of safeguarding the organization's assets.

添加您的观点

4 Offer Solutions

When you bring up problems, be ready to offer solutions. Simply pointing out flaws without suggesting ways to fix them can come across as unconstructive criticism. By providing a clear plan of action or recommendations for improvement, you demonstrate your commitment to the organization's security and show that you are a problem-solver, not just a problem-finder.

添加您的观点

Reza Ameri
举报内容
It is good idea to offer solution but sometimes you may point out the problem and seek feedback. Let people to get involve and talk. This also help them understand the challenge and complexity of the information security.

已翻译

赞

5 Educate and Advocate

Sometimes, non-constructive responses to feedback stem from a lack of understanding. Take the opportunity to educate your peers about information security principles and the potential impact of security breaches. Use relatable analogies and real-world examples to illustrate your points. Advocating for regular training sessions or information security awareness programs can also help build a more security-conscious culture within your organization.

添加您的观点

Yasin K.

Head Of SOC Operations ? Cyber Security Consultant ? C-Suite Advisor ? Threat Researcher ? CTI & OSINT & DARKINT ? Data Center/Ar-ge ? Computer Science B.A. ? Cyber/IT Law M.Sc. ? Infomation Management Ph.D
举报内容
Feedback on information security should be taken seriously. If constructive feedback is not forthcoming, this can be done in the form of a structured questionnaire, which can also be considered as part of the information security training process.

已翻译

赞

6 Patience Pays

Change often takes time, especially in the realm of organizational culture and attitudes towards information security. Be patient but persistent in your efforts to communicate the importance of taking your feedback seriously. Continue to provide valuable insights, offer help, and remain engaged with the process. Over time, your consistent approach can lead to positive changes and a greater appreciation for the role of information security in the organization.

添加您的观点

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Gabriel Loschi

Head de Security by Design | Seguran?a Digital | Gest?o de acessos | BISO | CCISO | CISSP | CISM
举报内容
Feedback podem ser positivos ou negativos, nos negativos encare como ponto de melhoria. Se seu amigo, parente ou lider estiver te dando um feedback "negativo", encare que é porque ele se importa com você, n?o estaria "perdendo tempo" se ele(a) n?o se importasse. Portanto colocar em prática 5 pilares sempre: - N?o leve para o lado pessoal - N?o fique na defensiva - Encare como uma crítica construtiva - Saiba ouvir - Agrade?a o feedback e aplique as mudan?as necessárias Lembre-se que o feedback faz parte da vida de todos e se souber escutar e tirar o real objetivo da mensagem será uma pessoa e profissional cada vez melhor!

已翻译

赞

Information Security

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

What do you do if your feedback on information security is not constructive?

1

2

3

4

5

6

7

1 Reflect First

2 Seek Allies

3 Escalate Appropriately

4 Offer Solutions

5 Educate and Advocate

6 Patience Pays

7 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

更多Information Security相关文章

更多相关阅读内容

What do you do if your feedback on information security is not constructive?

1

2

3

4

5

6

7

1 Reflect First

2 Seek Allies

3 Escalate Appropriately

4 Offer Solutions

5 Educate and Advocate

6 Patience Pays

7 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

查看其他技能