Telling your employees that they should do something isn’t enough to inspire meaningful change. Just ask any employee who has ever watched a cybersecurity awareness video. Although the videos instruct employees to be mindful of data security, they seldom lead to a wholesale improvement of a company’s security behaviors. To improve your cybersecurity culture, and, ultimately, your businesses’ resistance to attacks, you must measure what people do when no one is looking.
How Yahoo Built a Culture of Cybersecurity
Three steps to meaningfully change employees’ behavior.
September 30, 2021
Summary.
Yahoo studied employee responses to simulations to better understand how to make them take cybersecurity seriously. To make meaningful change, managers should take three key steps. First, they must identify critical employee behaviors. Second, managers must measure behaviors transparently. Finally, managers must use awareness to explain why something is important.
New!
HBR Learning
Persuading Others Course
Accelerate your career with Harvard ManageMentor®. HBR Learning’s online leadership training helps you hone your skills with courses like Persuading Others. Earn badges to share on LinkedIn and your resume. Access more than 40 courses trusted by Fortune 500 companies.
How to convince the unconvincable.
Learn More & See All Courses
New!
HBR Learning
Persuading Others Course
Accelerate your career with Harvard ManageMentor®. HBR Learning’s online leadership training helps you hone your skills with courses like Persuading Others. Earn badges to share on LinkedIn and your resume. Access more than 40 courses trusted by Fortune 500 companies.
How to convince the unconvincable.