Yo Motherboard

How can I get my company to care about security policies?

September 14, 2025 5 answers
Asked by SillyPanda42
We have security policies in place, but it feels like no one actually reads them or engages with them. We often struggle to get team members to complete attestations, and tracking who has acknowledged policies is becoming a huge time drain. I'm looking for ways to foster a culture of compliance around security and also automate the tracking and reminders to make the process less of a manual hassle.
company culture compliance IT policies management Security+ System Operations

Answers

BusyBee20
Using tools like KnowBe4 could help with your training and tracking needs. It automates reminders and integrates with company processes so that non-compliance gets directly flagged, giving you less manual work.

SkepticalOwl88: I’ve heard good things about KnowBe4. Sounds like it could streamline things for sure.

CuriousCat77: It’s great for tracking too. Makes it easier to show compliance to higher-ups.

Reply to this answer
TechieTortoise90
You might also want to make compliance a part of the onboarding process. If employees must take the time to understand security policies from the start and don’t just treat it as paperwork, it might help embed the culture better.

RealistRaccoon12: Absolutely. If onboarding includes time dedicated to these policies, they might be taken more seriously.

PragmaticPenguin55: Exactly! Instead of piling it on as one more thing to sign, make it a real part of their welcome.

Reply to this answer
MischievousMonkey34
Another approach is to keep making it engaging! For instance, try throwing in incentives like snacks for training completions to make it enjoyable. It definitely helped at my past company!

PracticalFox99: Good idea! Making it fun could really help increase participation.

RealistRaccoon12: Who wouldn’t want free snacks? It’s about turning compliance into something people look forward to.

Reply to this answer
FastFrog11
I think incorporating consequences works wonders. If employees know they could get temporarily locked out or have their accounts disabled if they don’t comply with security training, they’ll likely take it more seriously.

SkepticalOwl88: But isn’t that kind of harsh? Wouldn’t that just create a culture of fear?

CuriousCat77: Maybe fear works in the short term, but it could also lead to hiding issues instead of addressing them.

Reply to this answer
CleverTurtle23
Honestly, it often comes down to upper management. If they’re not committed to security policies, it creates a culture where the rest won't care either. Management needs to create a culture of compliance with clear consequences for not adhering to security protocols.

CuriousCat77: I totally agree. If upper management doesn't prioritize security, it's tough to get everybody else on board.

PracticalFox99: Executives really need to set the tone, otherwise, it's just going to be ignored.

Reply to this answer

Add your answer

Answers are reviewed before publication.

Related Discussions