Security Awareness and Climate Change – Scaring People is Not the Right Approach

Far too many security awareness training programs start with a series of horror stories about hackers and identity theft, lost money and damaged reputations, privacy breaches and deleted computer files. Before long, the average student starts to tune out – after all, if it’s that bad out there, there’s not much that can be done about it.

I was reminded of this when I came across an article about climate change – Doomsday scenarios are as harmful as climate change denial – which points out that dire warnings about global warming may well be counter-productive.

Now, I’m not saying that we shouldn’t tell students about the potential consequences of poor information security, but that should be just one small part of our message, with the rest of it being positive – how we can make things safer to our mutual benefit. A carrot is often better encouragement than the threat of the stick.

Some Further Reading

Jessica Holland

Add comment

Like this post? Subscribe to receive updates directly in your inbox.