What do you do if your feedback on network security compromises your relationship with colleagues?

Communication of security concerns within your organization must be done with care and from a position of a partner. If you are partnering with your organization and creating a culture of cybersecurity awareness, the organization will be open and ready to receive communications about potential risk and suggestions on how to improve security measures that reduce risk and improves operational resilience. Be a partner, create cyber awareness.

If your feedback on network security damages your relationship with colleagues, first analyze it and ask a clear and proper explanation. Focus on common goals and work together to find a solution. Follow up to ensure it continues to effectively address security concerns. Communication, understanding, and collaboration are key.

Create a culture where security matters Build trust with your wider employee and non-employee base Carry out security awareness training regularly Have a robust process for leaving employees Tools for malicious employee mitigation Remember your wider supply chain Social engineering attacks are not only becoming more common against enterprises and SMBs, but they're also increasingly sophisticated. With hackers devising ever-more clever methods for fooling employees and individuals into handing over valuable company data, enterprises must use due diligence in an effort to stay two steps ahead of cyber criminals.

If your feedback causes friction stand on your principals. As a security practitioner we have a code of ethics. Don't make emotional arguments. Use facts to back your opinion. If you stand on principals, remain ethical, don't have emotional responses and speak with facts and there is still a falling out you probably need to steer clear of that colleague anyway.

I focus on presenting clear, factual information about the security concerns without making it personal. Using data and specific examples helps illustrate the issues more effectively. Instead of just highlighting problems, I suggest potential solutions or improvements.

In my experience when I received a feedback, it was done in a confortable environment just me and the director and he was extremely kind. I would follow the same path, being kind, and good listener, hear the thoughts' person who is receiving the feedback. Try to understand what the person is going through in his personal life that could be interfering in his professional life.

Selecting an opportune moment is crucial when delivering sensitive feedback. Avoid high-stress periods or moments of public scrutiny and opt for a time when your colleague is most receptive. Conduct the conversation in a private setting to prevent them from feeling cornered or embarrassed, fostering a more open and constructive dialogue. Aim to address concerns without eliciting defensiveness, facilitating a collaborative effort to bolster network security. Encourage mutual understanding and cooperation, emphasizing the shared goal of safeguarding the organization's assets. By prioritizing the timing and environment of the discussion, you can promote a culture of proactive engagement and continuous improvement in network security practices.

Choisir le bon timing pour aborder la question de mes commentaires sur la sécurité du réseau dépend de plusieurs facteurs. Je considère les horaires de travail de mes collègues, l'importance des projets en cours et je privilégie les moments où chacun est disponible et ouvert à la discussion.

Communication is key as IT Security/Cyber security professionals and hence we should wear multiple hats e.g. if you are discussing with your team, wear your technical hat and if you are discussing with leadership team then wear your business acumen hat and articulate clearly in non technical language as why network security related issue has occurred and what is the impact it is going to have for the business and how it can be eliminated.

When addressing network security issues, clear communication is paramount. Use non-technical language as needed to ensure your colleague comprehends the feedback without being overwhelmed by jargon. Specify areas requiring improvement and articulate their significance clearly. Provide solutions or suggestions for addressing the issue, and remain open to discussing alternative approaches. Adopting a collaborative stance can alleviate any perceived criticism and demonstrate a shared commitment to a common goal. Encourage open dialogue and problem-solving, fostering a sense of partnership in enhancing network security measures. By prioritizing clarity and collaboration, you can effectively convey the importance of addressing security concerns

Pour communiquer clairement, je m'assure d'utiliser un langage simple et direct, en évitant les termes techniques complexes lorsque cela est possible. J'organise mes idées de manière logique et je suis ouvert à clarifier tout point ambigu. écouter activement est aussi essentiel.

Clearly communicate your views and ask for feedback in regards to it. Listen and see other views,so different views could be compared.

It is easy to say clear communications is key. In my opinion it is best to have good listeners on each side. Just as important is to be able to express your ideas without concern for offending or getting offended by ideas and criticism. Some of the best employees/leaders I have dealt with are sometime the most brutally honest. When it comes to network security being lackadaisical is bad policy.

Active listening is integral to effective communication. After presenting feedback, afford your colleague the opportunity to respond and share their perspective. They may offer insights or constraints vital to finding solutions. Demonstrating value for their input fosters trust and cooperation, crucial for resolving network security issues amicably. Validate their contributions, acknowledging their expertise and experience in the matter. Encourage open dialogue to explore potential challenges and collaboratively devise effective strategies. Embrace a mindset of mutual respect and understanding, recognizing the shared goal of enhancing security measures. By actively listening and engaging you promote a culture of collaboration

Pour écouter activement, je me concentre pleinement sur ce que dit mon interlocuteur, sans interruption ni jugement. Je pose des questions pour clarifier, réfléchis à ce qui est dit, et je fais preuve d'empathie pour comprendre ses sentiments et perspectives.

Follow up is key specifically if you are working with leadership teams as they have many other priorities on their to-do list and due to multiple things it is easy for them to miss something so it is always helpful to clearly communicate with them e.g. what is expected out of them and what is the timelines for it. Also if you are attaching any documents then do talk about it in email body e.g. what is that document all about and what is expected by the leadership team in that document e.g. review, approval, etc.

Following up after the initial conversation is crucial to demonstrate commitment to issue resolution and appreciation for your colleague's efforts. Acknowledge any steps they've taken to address the feedback, expressing gratitude for their dedication. Offer continued support if needed, reaffirming your commitment to collaborative problem-solving. This ongoing engagement reinforces your professional relationship, illustrating that feedback was intended to be constructive and supportive. Emphasize the importance of their contributions to enhancing network security, fostering a sense of shared responsibility and accomplishment. By maintaining open communication and providing ongoing support, you cultivate a culture of mutual respect

Pour faire le suivi, je prends des notes pendant la conversation pour me rappeler des points importants. Ensuite, je peux envoyer un résumé par e-mail pour confirmer les décisions prises et les actions à entreprendre. Je reste disponible pour répondre aux questions et pour apporter des clarifications supplémentaires si nécessaire.

I do not believe that people in general intentionally compromise security. Therefore, it's important to understand why choices were made before judging them. If you understand why less than desirable designs have been implemented, you will be able to address the real issue and prevent it from happening again. It's doesn't matter if it's a business requirement, lack of knowledge/resources, or it was simply the best or only choice at the time. As a security expert it's your objective to improve the security posture, and you do so by being a partner providing new insights. Try to inspire, rather than criticize.

Respect for colleagues is crucial when providing feedback on network security. Recognize their expertise and contributions, presenting the situation as a joint effort to strengthen the organization's security stance. Approach discussions with professionalism, valuing diverse viewpoints and nurturing a culture of mutual respect. By showing respect and gratitude towards your colleagues, you reduce the risk of straining relationships and underscore the significance of network security as a shared priority. Promote open communication and constructive feedback, highlighting the collective obligation to protect the organization's assets.

Maintaining respect for colleagues is paramount when providing feedback on network security. Acknowledge their expertise and contributions, framing the situation as a collaborative effort to enhance the organization's security posture. Approach discussions with professionalism, valuing differing perspectives and fostering an environment of mutual respect. By demonstrating respect and appreciation for your colleagues, you minimize the risk of damaging relationships and reinforce the importance of network security as a shared priority. Encourage open dialogue and constructive feedback, emphasizing the collective responsibility for safeguarding the organization's assets.

Security must be considered in terms of architecture, and within this architecture, security training will be planned and executed for all employees. It is hugely important to reduce attack surface, but there are benefits to avoid misunderstandings because a well-trained security person will understand that security feedback is a good action for themselves in their private life as well as for the company