<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Security Culture on IRRGANG.DEV</title>
    <link>https://www.irrgang.dev/tags/security-culture/</link>
    <description>Recent content in Security Culture on IRRGANG.DEV</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en-US</language>
    <copyright>© 2026 Dennis Irrgang · [Legal notice](/legal-notice/) · [Privacy](/privacy-policy/)</copyright>
    <lastBuildDate>Fri, 11 Jul 2025 18:38:23 +0000</lastBuildDate><atom:link href="https://www.irrgang.dev/tags/security-culture/index.xml" rel="self" type="application/rss+xml" />
    
    <item>
      <title>Information security is not an IT issue – it is a corporate responsibility</title>
      <link>https://www.irrgang.dev/information-security-is-not-an-it-issue/</link>
      <pubDate>Fri, 11 Jul 2025 18:38:23 +0000</pubDate>
      
      <guid>https://www.irrgang.dev/information-security-is-not-an-it-issue/</guid>
      <description>&lt;h2 class=&#34;relative group&#34;&gt;A call after the worst-case scenario&#xA;    &lt;div id=&#34;a-call-after-the-worst-case-scenario&#34; class=&#34;anchor&#34;&gt;&lt;/div&gt;&#xA;    &#xA;    &lt;span&#xA;        class=&#34;absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none&#34;&gt;&#xA;        &lt;a class=&#34;text-primary-300 dark:text-neutral-700 !no-underline&#34; href=&#34;#a-call-after-the-worst-case-scenario&#34; aria-label=&#34;Anchor&#34;&gt;#&lt;/a&gt;&#xA;    &lt;/span&gt;&#xA;    &#xA;&lt;/h2&gt;&#xA;&lt;p&gt;A company calls. Ransomware. Production has come to a standstill. The first question: &lt;em&gt;“How could this happen?”&lt;/em&gt; A better question would have been: &lt;em&gt;“Why didn’t we do anything about it before?”&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;Many companies still treat information security as a chore – something you do because you have to. It is regrettable that regulatory pressure is often needed to make this happen, but given human weaknesses in dealing with statistics and risk, it is hardly surprising.&lt;/p&gt;</description>
      
    </item>
    
    <item>
      <title>Rethinking leadership: Psychological barriers, motivation, and the value of small incentives</title>
      <link>https://www.irrgang.dev/psychological-barriers-motivation-and-incentives/</link>
      <pubDate>Sun, 08 Jun 2025 15:21:43 +0000</pubDate>
      
      <guid>https://www.irrgang.dev/psychological-barriers-motivation-and-incentives/</guid>
      <description>&lt;h2 class=&#34;relative group&#34;&gt;Introduction&#xA;    &lt;div id=&#34;introduction&#34; class=&#34;anchor&#34;&gt;&lt;/div&gt;&#xA;    &#xA;    &lt;span&#xA;        class=&#34;absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none&#34;&gt;&#xA;        &lt;a class=&#34;text-primary-300 dark:text-neutral-700 !no-underline&#34; href=&#34;#introduction&#34; aria-label=&#34;Anchor&#34;&gt;#&lt;/a&gt;&#xA;    &lt;/span&gt;&#xA;    &#xA;&lt;/h2&gt;&#xA;&lt;p&gt;I keep asking myself why simple, well thought-out and cost-effective ideas for improving corporate culture, &lt;a href=&#34;https://www.irrgang.dev/3d-printing-safety/&#34; &gt;safety&lt;/a&gt; or productivity fall on deaf ears. Not only in corporations with cumbersome bureaucracy, but also in small companies with flat hierarchies and seemingly short decision-making processes. Am I naive because I believe that people would write a LinkedIn article for a cup of coffee? Or because I believe in a positive reinforcement culture instead of disciplining employees with compulsory training or silent frustration?&lt;/p&gt;</description>
      
    </item>
    
  </channel>
</rss>
