Do you really care about security?

by

silhouette of businessman in keyhole

I’ve been in positions that have had security personnel reporting to me directly, and I have to admit I’ve often just considered them to be part of a function that just needs to get done. Security people tend to be overly paranoid, and they always seem to be costing money, making suggestions that slow everyone down and cause all sorts of other annoyances.

On one hand, I’ve seen some pretty bad things done in the name of security that almost always result in systems being less secure. Anyone familiar with the old: you must have a password with at least 10 characters, it must include at least one lowercase, one uppercase, one numeric and one special character. Yeah – nobody can remember them so we write them down on a sticky note on the computer. This causes the password to be completely non-secure – the opposite of what you were hoping. Or how about email programs like Good or two factor authentication (e.g., physical fobs)  that make you have to have special devices or carry things with you. It’s almost like the security folks think security is more important than productivity!

But, I’ve also seen when security breaches happen – and the fallout can be massive. Just recently, I received an email from  my son’s high school. It turns out that one of the students (what would

you expect from a science and technology magnet school?) hacked into the system to get parent emails. Fortunately, nothing bad came out of it, but it was a clever hack and deception that could easily have resulted in further fall-out.

My advice? You should balance security with usability, flexibility and cost. Security itself is a business decision. How much risk can you tolerate? What is your exposure? What are you willing to give and take away in the name of security? And please, don’t forget your users. It’s a business decision to make their lives more difficult to get their work done. If you don’t put them in the picture, you will sap their productivity and creativity.

READ MORE

Why Keeping It Real Is a Winning Strategy

Why Keeping It Real Is a Winning Strategy

If I had to sum up my pandemic year, I might say it was the year I got to spend each day of an entire summer with my daughter. It was also the year that I significantly altered my career path by taking the brilliant advice of my coach: to lead with my values (keep it...

read more
Meaningful Brand Maturity vs. Promotional Box Checking

Meaningful Brand Maturity vs. Promotional Box Checking

Featuring: Errika Flood-Moultrie Diversity. Equity. Inclusion (DEI). Individually, each word packs its own unique punch, but together, this lineup represents something much greater — profound even — and that is true head and heart transformation. As a people-first,...

read more
Why Does Change Management Keep Getting Put in Time Out?

Why Does Change Management Keep Getting Put in Time Out?

Buzzword Soup, Anyone? If I use words like “Transformation” or “Change Management” in a meeting, everyone nods like they get it. But in reality, there are usually as many understandings of those terms as there are people around the table. In today’s soup of ambiguous...

read more
Moving Forward From the Home Office

Moving Forward From the Home Office

It’s been almost 20 years since I’ve gone into an office five days a week. In that time, I’ve progressed in my consulting career from a Senior Manager, to a Principal, to a VP, to a Managing Partner, to a CEO. I barely remember what it’s like to “go to work” and to...

read more
The Leadership Dog Years

The Leadership Dog Years

As a business leader, I feel like I’ve been living in dog years — so much has happened that this year feels more like seven. In the spring, our company — like many others — had to throw out our annual plans and quickly pivot to new ones. In the summer, we increased...

read more