Computers have instilled habits into staff at every business
processing digital data. There are few systems that never require an initial
log on. Web based accounts use a username and password for access. A truly global
habit.
Application developers have been applying security functions that force user behaviours that will safeguard information. When users’ input is verified against a strong password policy, it is forcing a habit on users. The choice in the matter is removed and the system gets what it requires. The promise is that this alignment of input and policy improves security across the system.
Habits can be easily formed when there is a supportive culture and an accepted argument for the necessity. When information awareness training includes the value of the information processed on the system, the demand for its protection is made clear.
Strong passwords, encrypting emails, locking machines on leaving the desk and classifying documents are examples of good habits that are difficult to embed in a group. Technology could be used further to enhance the experience of the habit because in some cases, the user is being asked to do too much to comply for no apparent gain.
Automating as much of the process makes it easier for users to contribute to the security effort. I hold a piece of information that depreciates daily each month ending with a final value of £15. For me it is worth a lot even at its lowest. I created a habit that assures me of its ease of use and safety.
My train card is kept in a ticket wallet. I use the ticket at all barriers and replace it to the wallet each time I pass through a barrier. There are many times I question why I am replacing the ticket when I have to use it again at the next end of a station.
Putting the card back in the wallet is now automatic and I never have to search my belongings for it. I am also assured that I will not drop it anywhere far from a ticket point along my journeys. The practice is expensive but no longer onerous.
I do this because I appreciate the value of the ticket. The security habit that surrounds it is ‘good enough’ because it answers a common need in my particular circumstance.
Comments