Addressing the human security vulnerability
So, you have the best firewall, intrusion-detection and antivirus systems technology has to offer. Yet, despite your Fort Knox approach, you’re still hit with security breaches and the occasional malware du jour. One reason for this may be the lack of motivation by your workers. Unlike owners, they don’t have a direct interest in the success of the company. Or do they? How far are they willing to go to ensure corporate success?
Usually, not very. In fact, in most cases, they don’t put much additional effort into executing their duties — just enough to get the work done and retain their jobs. According to Ken Shaurette, information security solutions manager at MPC Technology Solutions, however, “a too-often overlooked way to improve these attitudes is to include information security in the job descriptions of employees.” When your organization makes security awareness and policy compliance mandatory, the apathetic trend can be reversed.
When management requires security policy compliance to be a key part of an employee’s job, interest is generated. An added benefit is that security becomes part of the corporate culture. With performance reviews (hence, possible raises) looming periodically, employees are more apt to fit compliance into their daily routine. Knowing that they’re being graded encourages employees to comply with policies.