People often overestimate themselves. We like to believe that we and our colleagues work in a super secure way. Just ask your colleagues if they think they are smarter than average, better drivers, or have better leadership skills than others. The majority will answer with a resounding 'yes.' But we cannot all be above average. Hackers know how to exploit this and play into it. People are trusting, overestimate themselves, and that makes them vulnerable. Especially when it comes to working securely. This is partly why people are the weakest link in security. Because where people work, mistakes are made. Consciously or unconsciously. Does this mean we cannot trust ourselves and our colleagues at all? Fortunately not, because with the right training and technical measures, we can address this and catch these mistakes.
With the right awareness training, you can go a long way. However, technical measures are also necessary. They are not trusting, and they do not overestimate themselves. Technical measures operate based on data, and data does not lie. Unfortunately, false positives do still occur. With technical measures, you can lock down your entire IT environment like a Fort Knox. I believe that creating a good balance between trusting your colleagues and implementing technical measures is vital for building a conscious and, above all, secure organization.
How do you handle this? Do you choose trust or locking it down?
