Here's how you can address a colleague not following proper cybersecurity protocols.

To address a colleague not following proper cybersecurity protocols, approach the situation with empathy and respect. For example, you could say, "I've noticed that some security steps are being overlooked, and I'm concerned about potential risks. Can we review the protocols together to ensure we're all on the same page?" Offering support and collaboration can help reinforce the importance of cybersecurity without causing friction.

This is not an easy one to say do A, B or C. It depends on who it was, what they did and what happened as a result. If it was someone on your team, it's going to depend on what they did or what level they are at. It's always in the approach though, if you handle it or you let a superior handle it. Someone outside IT? Give them a chance to learn from it. My old boss's admin opened malicious emails or links several times. After the first time, she started making a joke she knew I was going to talk to her about it. It was not a big deal, so we could make the joke and I didn't try to make it a huge deal. We also had someone plug in a rogue access point. Twice. One was found by my boss, who would only turn it over to the person's VP.

Addressing cybersecurity concerns is crucial. When a colleague isn't adhering to protocols, it's important to approach the situation tactfully. Start by understanding their perspective. Maybe they're unaware of the risks or find the protocols complex. Next, educate them about the importance of these measures and how they protect not just the organization but also individual data. If the behavior persists, involve your manager or the IT department to ensure everyone understands and follows the cybersecurity protocols. Remember, a secure environment is a collective responsibility. Let's work together to maintain it.

Continuous education and coaching are crucial here. In most cases I have encountered, deviations from security protocols were driven by pure and honest intentions, such as increasing efficiency, helping a colleague, or meeting a business-critical deadline. As security experts, we cannot and should not expect everyone to possess the same level of understanding about security protocols and their importance. It is part of our job to provide continuous education, guidance, and reminders about security protocols and the implications of circumventing them for the business.

It is good to start by having a private, non-confrontational conversation with the colleague to understand their perspective on cybersecurity protocols. Then use the opportunity to offer help in explaining or clarifying any procedures they find confusing or cumbersome. During this discussion, emphasize the importance of these measures by explaining how they protect the company, clients, and employees.

To quote my former leader "Gentle pressure, applied relentlessly.". People generally don't react to any strong criticism well. Be professional, nudge gently and take the time to explain in enough detail they'll understand the gravity what can happen if we don't all work together to protect the organization.

When addressing a colleague not following proper cybersecurity protocols, consider the following points: Clear Communication: Ensure all employees understand the significance of cybersecurity and the risks of non-compliance. Regular training and guidelines for reporting security breaches are essential. Collaboration and Information Sharing: Share information about threats and vulnerabilities to stay ahead of cybercriminals. Transparency and Accountability: Be transparent about cybersecurity practices and take responsibility for any breaches. Effective Communication During a Breach: Have a strategy for communicating with employees, clients, and stakeholders during a cyberattack. Regular updates minimize damage and protect you.

Those days are long gone my friend….but they were fun! We did the upside down ?? environment, made windows speak ??? and also did emails that buy doughnuts ??

If you're a professional in cybersecurity part of your job is to be an educator. Don't be the person that points fingers telling people what they're doing wrong, teach them how to do things right. People want to do the right thing but sometimes don't know how or are resistant to change. Offer support and guidance.

Establish a routine for reviewing cybersecurity protocols to maintain team compliance and awareness. Schedule these reviews quarterly, aligning them with updates in cybersecurity threats and advances in technology. During these sessions, use case studies of recent security breaches to illustrate the consequences of protocol lapses. Encourage open discussions about these incidents and how they could be avoided in your environment. This practice not only reinforces the importance of following established protocols but also keeps the team updated and engaged, ensuring continuous improvement in your cybersecurity posture.