[Discuss] A Little OT: The Password Post-It

[gaf at blu.org (Jerry Feldman)]

On 04/18/2012 03:54 PM, Bill Horne wrote:
> On 4/18/2012 2:16 PM, Richard Pieri wrote:
>> On 4/18/2012 1:20 PM, Chris O'Connell wrote:
>>> So, end user training?  Good point!
>>
>> Don't call it that.
>>
>> Security isn't a destination.  Security isn't the journey.  Security
>> is the faithful companion who accompanies you every step of the way. 
>> If you say "training" then your users are going to perceive security
>> as a shackle dragging them down rather than the companion it is.
>>
>
> I will modestly suggest an alternative approach: advertise a free
> seminar on "tax avoidance".  EVERYONE wants to avoid taxes.
>
> When the employees show up, tell them that the most certain way of
> avoiding taxes is to get fired for ignoring security rules.
>
Threats don't work, especially when the worst offenders are senior
management.

-- 
Jerry Feldman <gaf at blu.org>
Boston Linux and Unix
PGP key id:3BC1EB90 
PGP Key fingerprint: 49E2 C52A FC5A A31F 8D66  C0AF 7CEA 30FC 3BC1 EB90