In Depth

Fear Factor

By Daintry Duffy

July 01, 2003CSO — We are rapidly devolving into a civilization of nervous nellies. All it took was a smudge of white powder on an elevator button recently to prompt a full-scale evacuation of a building in Delaware. The substance was later identified as sugar from a powdered doughnut. As a nation, we've pinned our hopes for future survival on the frenzied acquisition of duct tape and plastic sheeting. In truth, we've probably all stored up enough canned tuna and baked beans so that, if the worst ever happens, we won't go down without a good case of scurvy.

Even when the warnings seem reasonable enough, rationality often flies out the windowsecurity in all its visual manifestations reminds us of just how vulnerable we are. That's why managing a sound security program means so much more than amassing a cadre of guards, metal detectors, ID badges and computer technologies. On the contrary, introducing closed-circuit cameras into the workplace is something that could be interpreted by employees as a sign of concern for their safetyor a suggestion of corporate mistrust. Metal detectors in an office lobby may offer reassurance in a high-risk locationor they may create anxiety for those entering the premises.

"What to a CSO is an impersonal protective measure, to most employees represents an emotional message," says Ken Siegel, a management psychologist and president of The Impact Group. "There's no such thing as an antiseptic intervention."

To understand the psychological reactions that employees can have to security measures, CSOs will need to become effective communicators and strategists. We talked to psychologists and security experts about various psychological reactions to security and the reasons behind them. Here are some techniques that psychologically savvy CSOs can use to "head-shrink" their security style for success.

Perhaps studying psychological reactions to security might strike some CSOs as a colossal waste of time. After all, how interesting can it be to get inside the minds of people who time and again choose their own last name as a password? Nevertheless, 80 percent of security is psychology driven, insists Rich Maurer, associate managing director of the Security Services Group for consultancy Kroll, suggesting that it's a rich area to mine for improvements in security planning and practice.

To understand how employees feel about security, CSOs must first accept that users' enthusiasm for security measures will wax and wane drastically over time. During periods of great anxiety, their natural reaction will be to say, I'll do anything you want, just keep me safe. In the airports following 9/11, for instance, the tolerance was fairly high for bag searches, long lines and national guardsmen with M-16s casually slung over their shoulders. But people can't sustain that level of anxiety indefinitely, says Dr. Robin Dea, chairman of the chiefs of psychiatry at Kaiser Permanente in northern California. She points out that once people become accustomed to the new level of risk, they start to question whether the security measures really make a difference. "Suddenly that national guardsman starts to look more like a 22-year-old kid with 45 minutes of training with an M-16," Dea says. It just doesn't create quite the same aura of safety.

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WEBCAST
IT productivity challenges: Google survey results

GoogleIn this webcast, Google reveals results from a survey of message security and compliance priorities and concerns. Download a free copy of the survey report after registering.

» Watch the Webcast

Featured Sponsors
Sponsored Links

Secure your virtual and physical environments with the same software.

Can Google help you save time and money in your fight against spam?

An Executive Guide to Understanding Hosted Messaging Systems

ITCi White Paper: Challenges and Opportunities of PCI

The PCI Data Security Standard

Hardware-based security. That's IT as it should be.

A Guide to Providing Proactive Protection to Consumer Online Transactions

Webcast: Best practices in application security: How do you stack up?

White Paper: Use DAM technology when there is a need for granular monitoring.

This white paper presents document security strategies and best practices

IT Service Management: Metrics That Matter

White Paper: Learn more about how you can use compliance as a means of competitive differentiation.

Simple, Economical Server Virtualization For Any Size Company

Global Companies' Best Practices for Security and Compliance

Diebold: Frost & Sullivan Global Physical Security Systems Integrator of the Year

Tripwire PCI DSS Solutions: Automated, Continuous Compliance

Gene Kim's Practical Steps to Mitigate Virtualization Security Risks

Eliminate network threats and downtime with Juniper Networks. View demo

Configuration Audit and Control for Virtualized Environments

Webcast: learn results from an annual Google message security survey of 575 global IT professionals

This whitepaper describes how you can test your Web applications with virtualization

Read The Evolution of Application Security in Online Banking White Paper

White Paper: Learn how to use Adaptec(R) Snap Server(TM) with MOBOTIX IP Network Cameras

Compliance: Moving From Mandate to Differentiator White Paper