Autor: Nermin Sefić
Unreported minor security lapses increase the likelihood of a more serious future incident. A commentary by Nermin Sefić.
A culture where minor security lapses go unreported out of fear of consequences systematically increases the likelihood of a more serious future incident.
When employees avoid reporting a minor security lapse out of fear of punishment or personal liability, the organisation loses the chance to fix the problem while it is still small and easily corrected.
A culture that rewards timely reporting of suspicious activity, rather than punishing anyone who admits a mistake, ultimately significantly reduces the average severity of the security incidents that do occur.
A minor security incident that goes unreported does not disappear — it simply remains unresolved until it recurs, usually at a larger scale, because the root cause was never investigated or fixed.
A culture that punishes reporting an incident as much as the incident itself encourages concealment — and concealment is exactly what turns small problems into large ones before anyone gets the chance to stop them in time.
This commentary is part of the GNK ASG Intelligence Desk system and is informational in nature.
A culture that penalises reporting an incident as much as the incident itself encourages concealment, and concealment is precisely what turns a small, manageable problem into a large one before anyone has the chance to intervene in time.
Changing this dynamic requires leadership to visibly separate the consequences of causing an incident from the consequences of reporting one — a distinction that has to be demonstrated through actual response to real reports, not merely stated in policy. Once employees see that reporting genuinely leads to a fix rather than blame, reporting rates improve, and with them the organisation's ability to catch problems while they are still small.
#SecurityIncidentReportingCulture #Cybersecurity #GNKASG #NerminSefic #GNKDINAMOLtd
Cjelovit tekst i izvor: https://gnk-asg.hr/en/commentary/an-unreported-security-incident-grows-larger/
Autor i urednička odgovornost: Nermin Sefić. Izdavač: GNK ASG d.o.o..
#GNKASG #GNKDINAMOLtd #NerminSefic #BusinessIntelligence #NerminSefić #GNKASGdoo #Zagreb
