The Psychological Bias That Leads To Poor App and Infrastructure Security

The Psychological Bias That Leads To Poor App and Infrastructure Security

If I offered you $10 now and $15 next week, which would you choose? Depending on your personality, you might think the obvious choice is to wait until next week and get 50% more money, but studies in psychology have shown that the majority of people take the money and run.

The effect is called intertemporal discounting, and it — in part — explains why we so often hear about security breaches which could have been avoided. (more…)

A Data Security Policy Makes Employees Accountable For Keeping Data Safe

A Data Security Policy Makes Employees Accountable For Keeping Data Safe

There are three main planks to any secure system: technology, policy, and education. If any one of these is lacking, maintaining data security over the long term is next to impossible. A technological solution is worthless if no one knows how to use it and why it should be used. Even if they do know how to use it, without an enforced policy, it’s entirely likely that employees will take the path of least resistance and greatest convenience. (more…)