Changing employees’ security behavior

Like precocious teenagers, some employees don’t want to be told what to do when it comes to cyber security. Too many rules about what they can and cannot do with technology can lead to bad decisions that inadvertently put company data at risk. Instead, a more subtle approach is required to help them make better decisions on their own.

But changing employees’ behavior is no easy task. People have an innate need to socialize and share information, says Alessandro Acquisti, professor of IT and public policy at Carnegie Mellon University, and a member of Carnegie Mellon CyLab.

Five sneaky ways companies are changing employees’ security behavior