All the rage lately seems to be user bashing. Here, here. There are others but I can't remember where they are off the top of my head. There have been several articles written by various people all of them talking about how User Awareness Training is a failure and that we can't trust end users to do the right thing. We need to quit wasting our time, money and efforts on them. Some even call them stupid and rant about how much of a problem they are.
We need to step back and remember a few things.
- We all have subjects that we are clueless about.
- End users are why we have a job in the first place.
- IT and Security have bad reputations among users already we don't need to do things to further foster it.
- We are all supposed to be professionals and calling people we work with stupid is not professional.
Technology Professionals are often seen as controlling, unfriendly, obnoxious, uncaring, and "know it alls". Even Staples has a commercial that depicts this. If we continue to perpetuate this by assuming that they will mess up and will be stupid then we are not helping. I will admit that they can be frustrating. So can ALL of us. We all have subjects that we don't fully understand and have a hard time getting a handle on. We need to remember that the next time we are tempted to give up on our users.
1 comment:
I agree with you Andy. It's always better to be considerate. I think the frustration stems from the fact that end users don't perceive the risks, so they don't bother taking precautions against them. If a person feels that the costs of security aren't worth the benefits, i.e. the risk is smaller than the cost to prevent it, then they won't bother. Security techs place a higher value on security than others and so they dedicate their lives to it and can't understand why others don't feel the same way. Patience and tolerance are definitely in order, as in all other aspects of life.
Post a Comment