While rules and guidelines can be created implementing them can be more difficult. Since the beginning of the pandemic many people have worked from home,in their own little silos, remote from the workplace and the conversations that happen there.
As we’ve had to learn, adapt, adopt new working practices, many people have felt overwhelmed and exhausted —even if they weren’t before. Asking them to take on responsibility for organisation security can feel like one step too far.
The answer is to create events they want to attend. And then to present the information in an immersive, interactive, engaging way that gets them wanting more, not less. Once they’re in this environment, then the conversations can happen.
It is also essential that the culture is psychologically safe. Only then can individual’s feel able to be open and potentially vulnerable. If they feel safe, they can raise concerns, maybe about a link they followed, or the behaviour of a co-worker.
Cybersecurity is not just about the technology. It’s about the behaviour of every member of the organisation. It’s about creating resilience within the organisation. And about assisting employees to build their own personal resilience.