Let me give you an example: In my healthcare days, hospital nurses often have downtime in the overnight shifts. Nurses often loaded games and streamed videos on their workstation, which was against company policy. When we approached hospital leaders, they asked for a technology solution: Block the nurses from loading games and streaming videos. I argued overnight managers should keep an eye on nurses and keep them busy. Technology solutions shouldn’t replace people management responsibility. In the end, technology solution won. And in the long run, this technology hurt that hospital’s culture and relationships with IT as an enabler.
Our SOP for these detection’s should be to report these incidents to their leader and HR. Let people processes work and govern themselves.
Jonathan Merrill, 2018
Technology solutions shouldn’t replace people management responsibility, but it does. And often. And not much as changed in 10 years, other than information security awareness is now a mandatory thing. Which should have changed the conversation. But it hasn’t.
Culture will trump policy every time.
\\ JMM