🇺🇸 English, 27 October 2026, employee security
Restrictive Cybersecurity Policies Backfire
Convincing employees that cyber threats are real is crucial for cybersecurity, but restrictive policies may have the opposite effect.
Across six experiments with over 2,800 participants, researchers found that overly restrictive cybersecurity policies can have unintended consequences.
Employees who felt micromanaged by such policies were less likely to comply with security protocols and more likely to engage in risky behavior.
The study suggests that a more nuanced approach to cybersecurity may be needed, one that balances security with employee autonomy and trust.