Security Behavior: Cognitive Bias Deep Dive

managed it security services provider

Security Behavior: Cognitive Bias Deep Dive


Ugh, cognitive biases. Arent they just the worst when it comes to security? check You think youre making a rational decision, but bam!

Security Behavior: Cognitive Bias Deep Dive - managed services new york city

  • managed service new york
  • managed services new york city
  • managed service new york
  • managed services new york city
  • managed service new york
  • managed services new york city
Your brain is playing tricks on you, and suddenly youve clicked on a phishing link or used the same password for everything (dont do that!). Its not that you want to be insecure; its just… well, your mind is a bit of a messy place, isnt it?


Lets not pretend were all immune. Were all susceptible to these mental shortcuts. Think about the availability heuristic. The more easily you can recall something, the likelier you are to think its common. So, if youve just read a news story about a massive data breach, you might overestimate the probability of your accounts being compromised and, ironically, perhaps take actions that arent really helpful.

Security Behavior: Cognitive Bias Deep Dive - managed it security services provider

  • check
  • check
  • check
  • check
  • check
  • check
  • check
  • check
  • check
  • check
  • check
  • check
Or maybe you wont take any action at all, because youre experiencing optimism bias – "It wont happen to me." managed it security services provider Thats not a good plan, is it?


And what about confirmation bias? We tend to seek out information that confirms our existing beliefs, ignoring anything that contradicts them. So, if you think a particular security tool is amazing, youre more likely to focus on the positive reviews and dismiss any negative feedback. This isnt a particularly wise approach to evaluating risk or implementing security controls.


Then theres anchoring bias. The first piece of information you receive can heavily influence subsequent decisions, even if that initial information isnt very relevant. Imagine a security vendor quotes you a ridiculously high price for a service, and then offers a "discount." Even if the discounted price is still more than youd normally pay, the initial high anchor can make it seem like a good deal. It doesnt necessarily mean it is a good deal, though.


We cant completely eliminate these biases; theyre part of the human condition. But we can be aware of them. Understanding how they work is the first step to mitigating their impact on our security behavior. managed services new york city It isnt about becoming a perfect, rational security robot; its about being more mindful of how our brains can sometimes lead us astray. Maybe, just maybe, with a little bit of self-awareness, we can all make slightly better, more secure choices. Wouldnt that be swell?

managed it security services provider managed service new york

Security Behavior: Cognitive Bias Deep Dive

Security Behavior: Cognitive Bias Deep Dive