Corporate Culture

A call after the worst-case scenario # A company calls. Ransomware. Production has come to a standstill. The first question: “How could this happen?” A better question would have been: “Why didn’t we do anything about it before?” Many companies still treat information security as a chore – something you do because you have to. It is regrettable that regulatory pressure is often needed to make this happen, but given human weaknesses in dealing with statistics and risk, it is hardly surprising.

Introduction # I keep asking myself why simple, well thought-out and cost-effective ideas for improving corporate culture, safety or productivity fall on deaf ears. Not only in corporations with cumbersome bureaucracy, but also in small companies with flat hierarchies and seemingly short decision-making processes. Am I naive because I believe that people would write a LinkedIn article for a cup of coffee? Or because I believe in a positive reinforcement culture instead of disciplining employees with compulsory training or silent frustration?