- How to make new stuff from your piles of obsolete tech
- Why your computer sucks
- 10 recession-proof IT skills
- Juniper execs share network vision
- 9-year-old plots his fifth Microsoft certification
Page 2 of 2
Other human psychology tendencies, such as “anchoring” -- a mental focus on suggested options that act to manipulate bias -- often trigger wholly non-rational response in decision-making.
In this psychology framework, according to Schneier, security managers should recognize that the responses to security risk by management and users, if not themselves, may be extraordinarily irrational.
“We make bad security tradeoffs when our feeling and our reality are out of whack,” he said. “You can see vendors and politicians manipulating these biases.”
The only advantage for security managers who understand these human inclinations regarding feeling and reality is that they can use “a little bit of well-placed security fear” that will help in security deployments or even “made people feel better.”
Comments (3)
RSA '07: Bruce Schneier casts light on psychology of securityBy Anonymous on February 7, 2007, 3:40 pmIn a quarter century in the IT business, it's pretty clear that it isn't just security decisions that are poorly made. But what can a well-meaning but clueless...
Reply | Read entire comment
I guess this guy has beenBy Anonymous on February 7, 2007, 5:04 pmI guess this guy has been through airport security a time or two.
Reply | Read entire comment
wank!By Anonymous on October 15, 2008, 9:54 amwank!
Reply | Read entire comment
View all comments