{"title":"不要责怪别人,修复系统","authors":"Christine Bejerasco","doi":"10.12968/s1361-3723(23)70035-3","DOIUrl":null,"url":null,"abstract":"It's easy to blame people when security incidents occur. But while many types of breaches do indeed involve a human element, we should stop to ask ourselves why people acted in the ways they did, and why that was allowed to become a problem. Our systems and processes need to be designed with security embedded deeply within them so that minor lapses on the part of staff members are prevented from becoming a problem.","PeriodicalId":35636,"journal":{"name":"Computer Fraud and Security","volume":"66 1","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2023-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Don't blame people – fix the system\",\"authors\":\"Christine Bejerasco\",\"doi\":\"10.12968/s1361-3723(23)70035-3\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"It's easy to blame people when security incidents occur. But while many types of breaches do indeed involve a human element, we should stop to ask ourselves why people acted in the ways they did, and why that was allowed to become a problem. Our systems and processes need to be designed with security embedded deeply within them so that minor lapses on the part of staff members are prevented from becoming a problem.\",\"PeriodicalId\":35636,\"journal\":{\"name\":\"Computer Fraud and Security\",\"volume\":\"66 1\",\"pages\":\"\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2023-08-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Computer Fraud and Security\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.12968/s1361-3723(23)70035-3\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q1\",\"JCRName\":\"Social Sciences\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Computer Fraud and Security","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.12968/s1361-3723(23)70035-3","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"Social Sciences","Score":null,"Total":0}
It's easy to blame people when security incidents occur. But while many types of breaches do indeed involve a human element, we should stop to ask ourselves why people acted in the ways they did, and why that was allowed to become a problem. Our systems and processes need to be designed with security embedded deeply within them so that minor lapses on the part of staff members are prevented from becoming a problem.
期刊介绍:
Computer Fraud & Security has grown with the fast-moving information technology industry and has earned a reputation for editorial excellence with IT security practitioners around the world. Every month Computer Fraud & Security enables you to see the threats to your IT systems before they become a problem. It focuses on providing practical, usable information to effectively manage and control computer and information security within commercial organizations.