Boris Fischer argues that corporate policies can't control insider behavior because employees are individuals with their own values and motivations. When rules conflict with personal goals, people find workarounds. Punishment-based compliance actually increases organizational risk.
Chapters
Hi, I'm Boris Fischer and I'm the author of my new book, the Human side of Cyber. And I want to share some insights from chapter one. That insiders cannot be controlled. And that's obvious because every person is unique. Every person has a different set of behaviors. We're dynamic. We have different aspirations, values, beliefs. So if we're trying to control the workforce through corporate policies, we're most likely going to fail. Should a person decide that the corporate policy hinders them or doesn't support them, they'll find ways to get around. It's like having linear thinking bringing to a non linear problem. It just doesn't work. So the key takeaways if you try to negatively reinforce corporate policies onto your workforce, you're more likely to increase the risk of pain and harm to your organization.