登录查看更多内容

You have a coworker who does not follow security protocols. How can you get them to change their ways?

由人工智能和领英社区提供技术支持

Security protocols are not optional in information security. They are designed to protect the confidentiality, integrity, and availability of data and systems from unauthorized access, modification, or destruction. However, not everyone in your team may share the same level of awareness or commitment to security best practices. You may have a coworker who ignores password policies, clicks on suspicious links, or shares sensitive information over unsecured channels. How can you get them to change their ways and follow security protocols?

此文章中的业界达人

由社区从 9 条内容中精选。了解更多

Emanuel Medeiros

Gerente de Projetos de Pequeno Porte do Refino
Tatiane Moreira, SSAP

HR Business Partner | Soft Skills | Desenvolvimento pessoal | Plain language | Organizacional culture | SSAP
Nathan Tofani

Network and Security Tech Lead | CompTIA Security+ | Security Operations Center | Risk Management | Vulnerability…

1 Understand the root cause

The first step is to understand why your coworker does not follow security protocols. Is it because they are unaware, indifferent, or resistant to them? Do they lack the knowledge, skills, or tools to implement them? Do they face any barriers, challenges, or incentives that influence their behavior? By identifying the root cause, you can tailor your approach and address the specific issues that prevent your coworker from complying with security protocols.

添加您的观点

Jeiziel S.

LinkedIn Top Voice | Especialista em Seguran?a da Informa??o e Cybersecurity | Consultor | GRC | CSIRT/CTI | SOC-MSS | EDR/XDR & SOAR/SIEM (SENTINEL/QRADAR/SPLUNK/ELASTIC/CORTEX/STELLAR ) | IA (DARKTRACE/CROWDSTRIKE)
举报内容
Para abordar um colega de trabalho que n?o segue os protocolos de seguran?a, é essencial ter uma comunica??o clara e direta, destacando a importancia dos protocolos e as consequências de n?o segui-los. Ofere?a conscientiza??o, educa??o e exemplos concretos dos riscos de seguran?a, fornecendo feedback construtivo e apoio na mudan?a de comportamento. Se necessário, envolva a lideran?a para abordar o problema de forma mais formal. Modelar comportamento positivo também pode inspirar seu colega a aderir aos protocolos de seguran?a, criando uma cultura de seguran?a cibernética na equipe.

已翻译

赞
Tatiane Oliveira

Data Protection Officer (DPO) | ISO 27001 Security Information System | NIST 2.0 Cybersecurity | ISO 31000 Risk Manager | Perícia Forense Computacional | PLD/FT | Redes de Computadores
举报内容
As mudan?as de um ambiente sem a seguran?a necessária para um ambiente com as devidas medidas de seguran?a pode causar desconforto e até mesmo "burocracias" em certos aspectos. Ex. Antes era só logar no e-mail da empresa com a senha: 123456, agora a senha precisa ter no mínimo 12 caracteres e conter letras maiúsculas, minúsculas, símbolos, caracteres especiais… e ainda tenho que usar o MFA. Esse desconforto acima é comum e só será sanado com a conscientiza??o sobre a necessidade das medidas de seguran?a e quando a seguran?a é trazida para a realidade do indivíduo.

已翻译

赞

2 Educate and inform

The next step is to educate and inform your coworker about the importance and benefits of security protocols. You can use facts, examples, and stories to illustrate the potential risks and consequences of not following them, such as data breaches, identity theft, legal liability, or reputational damage. You can also highlight the positive outcomes and rewards of following them, such as improved performance, customer trust, or recognition. You can use various methods to deliver your message, such as presentations, newsletters, videos, or quizzes.

添加您的观点

Tatiane Moreira, SSAP

HR Business Partner | Soft Skills | Desenvolvimento pessoal | Plain language | Organizacional culture | SSAP
举报内容
Uma boa forma de educar usuários que insistem em n?o seguir os protocolos de seguran?a é o envolvendo em simula??es práticas, como as de phishing por exemplo. Para que os riscos fiquem mais claros e também possibilitar um treinamento mais focado para que ele entenda as consequências que aquele comportamento inseguro pode ter.

已翻译

赞
Nathan Tofani

Network and Security Tech Lead | CompTIA Security+ | Security Operations Center | Risk Management | Vulnerability Management | Threat Intelligence | Information Security
举报内容
Simulation and practical testing of activities can be a fundamental point for people to understand the concept and need, as well as the risks of not implementing good security practices. Raising awareness through actions is the best way to spread an idea and cover content successfully.

已翻译

赞
Tatiane Oliveira

Data Protection Officer (DPO) | ISO 27001 Security Information System | NIST 2.0 Cybersecurity | ISO 31000 Risk Manager | Perícia Forense Computacional | PLD/FT | Redes de Computadores
举报内容
Trazer abordagens e situa??es cotidianas também ajudar?o a trazer seguran?a da informa??o para a realidade palpável e entendimento.

已翻译

赞

3 Provide feedback and support

The third step is to provide feedback and support to your coworker as they try to follow security protocols. You can monitor their progress, recognize their achievements, and correct their mistakes. You can also offer your help, guidance, and resources to make it easier and more convenient for them to comply with security protocols. You can use different channels to communicate your feedback and support, such as emails, meetings, chats, or calls.

添加您的观点

Danish Tariq

Director, Cyber Security @ Laburity | 2x BlackHat Speaker | Featured at The Register
举报内容
Along with all the other good suggestions, showing empathy in this case is also very necessary because cyber security sometimes is not a very critical function for them but you have to make them understand from their perspective as well. i.e. CEO's could be informed about the potential business loss, Developer could be given a real life scenario example of a vulnerability, Non-tech colleague could be given an example of laptop that is unattended in a cafe for an understanding of an importance of something as simple as MFA, for example.

已翻译

赞

4 Collaborate and involve

The fourth step is to collaborate and involve your coworker in the development and improvement of security protocols. You can solicit their opinions, suggestions, and feedback on how to make the protocols more relevant, effective, and user-friendly. You can also invite them to participate in security-related projects, initiatives, or events that showcase their skills and contributions. By collaborating and involving your coworker, you can increase their sense of ownership, engagement, and responsibility for security protocols.

添加您的观点

Emanuel Medeiros

Gerente de Projetos de Pequeno Porte do Refino
举报内容
Minha experiência prática mostra que o mais importante é mostrar o propósito da regra, o que está por trás (ganhos/objetivos). Muitos que n?o seguem, fazem isso por n?o entender o real objetivo da regra. Falta de incentivo/propósito.

已翻译

赞
Tatiane Moreira, SSAP

HR Business Partner | Soft Skills | Desenvolvimento pessoal | Plain language | Organizacional culture | SSAP
举报内容
Mais do que conferir um senso de propriedade, você pode ir além e aproveitar a oportunidade para avaliar a usabilidade da ferramenta ou a intuitividade do seu procedimento. Em estudos recentes, a maioria dos usuários informaram que seguiriam os protocolos de seguran?a se eles fossem mais simples. Portanto, incluir a experiência do usuário no processo de seguran?a pode ser enriquecedor.

已翻译

赞

5 Model and reinforce

The final step is to model and reinforce the desired behavior of following security protocols. You can set an example by demonstrating how you follow security protocols in your own work and how it benefits you and the organization. You can also reinforce the behavior by providing positive reinforcement, such as praise, rewards, or recognition, whenever your coworker follows security protocols. You can also discourage the behavior by applying negative reinforcement, such as reminders, warnings, or sanctions, whenever your coworker violates security protocols.

添加您的观点

Tatiane Moreira, SSAP

HR Business Partner | Soft Skills | Desenvolvimento pessoal | Plain language | Organizacional culture | SSAP
举报内容
Na minha experiência, o ideal é sempre fazer o refor?o do comportamento esperado. é possível também usar gamifica??o para promover boas práticas e recompensar quem as segue. Mas lembre-se que o sucesso deste tipo de abordagem depende da cultura da empresa que você trabalha. Os usuários s?o abertos a este tipo de treinamento? Ou n?o se interessam? Leve sempre isso em considera??o.

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Information Security

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

You have a coworker who does not follow security protocols. How can you get them to change their ways?

1

2

3

4

5

6

1 Understand the root cause

2 Educate and inform

3 Provide feedback and support

4 Collaborate and involve

5 Model and reinforce

6 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

更多Information Security相关文章

更多相关阅读内容

You have a coworker who does not follow security protocols. How can you get them to change their ways?

1

2

3

4

5

6

1 Understand the root cause

2 Educate and inform

3 Provide feedback and support

4 Collaborate and involve

5 Model and reinforce

6 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

查看其他技能