When Restrictive Cybersecurity Policies Backfire

when-restrictive-cybersecurity-policies-backfire

When Restrictive Cybersecurity Policies Backfire

Harvard Business Review Logo

Javier Zayas Photography/Getty Images

Restrictive cybersecurity policies can backfire by making employees less likely to believe that digital threats are serious. Across six experiments involving more than 2,800

Generative AI and a rapidly evolving menu of workplace apps have changed the employee experience. People are surrounded by tools that help them write, code, analyze, summarize, design, and automate. Many of these tools are genuinely useful. So useful, in fact, that when organizations ban them, employees do not necessarily stop using them. Often, they continue using them less visibly.