Timeline for How to create a company culture that cares about information security?
Current License: CC BY-SA 3.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 20, 2016 at 7:59 | comment | added | undo | @paj28 that's... A pretty good idea | |
| Oct 20, 2016 at 7:57 | comment | added | paj28 | @schroeder - You can communicate this as a "drill" instead of a "fake" and there's no loss of trust. Analogy: I expect your office does periodic fire drills - yet you've not lost trust in your fire warden because of these "fakes". | |
| Oct 19, 2016 at 9:05 | comment | added | grochmal | While I'm a strong believer that trust is the ultimate value in safe communication (especially in an interconnected society), I see that this may work if made on a smaller scale. What I mean is that do not make people lose work, you may accidentally compromise the network in a very critical moment for some (and you may hold on your conscience that someone was fired because he did not deliver something on time). Instead work around this as a friendly prank. Infect the machines and then one day just tell your colleagues: do you want to see me shutting down all your personal devices right now? | |
| Oct 19, 2016 at 6:18 | comment | added | schroeder♦ | It's not about friendship, its about being able to communicate at any point in the future to your colleagues. Without trust, you can forget about building any type of culture or leading your organization to a more secure environment. | |
| Oct 19, 2016 at 3:09 | comment | added | undo | @Schroeder Maybe giving up on friendship/trust is a suitable compromise in exchange for a secure environment if you're going to be handling very sensitive information? IDK, that's for the OP to decide. I think I included enough warnings? Also, the OP doesn't have to tell them... Sometimes you need lie to get things done. That's just the way it is. | |
| Oct 19, 2016 at 3:05 | comment | added | undo | @whitehat101 Fair enough... | |
| Oct 19, 2016 at 2:54 | comment | added | whitehat101 | This is an awful idea. If you need to threaten and lie to your staff to get them to follow company policies, your company has serious management problems that need to be addressed before worrying about InfoSec. | |
| Oct 18, 2016 at 18:58 | comment | added | schroeder♦ | When they find out it was a fake, you will lose any trust they might have had in you. There is always something else to try. | |
| Oct 18, 2016 at 16:22 | history | edited | undo | CC BY-SA 3.0 |
Readability :P
|
| Oct 18, 2016 at 14:41 | history | answered | undo | CC BY-SA 3.0 |