Social factors that influence information security

Information security is often understood at an individual level because of the historically individualistic nature of the IT field. IT systems are built to serve an individual’s needs and to protect an individual’s data, so the security measures are often designed and implemented with the individual in mind (Falkon, 2020). However, this fails to recognize the importance of social context when it comes to security. Social dynamics, such as peer influence and social norms, can greatly influence how individuals and groups practice information security (California Institute of Technology, 2021). Social dynamics can lead to behaviors that undermine information security efforts. For example, people are more likely to respond to requests for access to sensitive data when the requester is a close friend or coworker than when the requester is a stranger or an unknown individual (California Institute of Technology, 2021). This is due to people’s natural tendency to trust others that they are familiar with. Additionally, social norms and expectations can influence how individuals handle security issues. For example, people may be hesitant to report a security incident out of fear of being judged negatively by their peers (Falkon, 2020). In order to effectively practice information security, it is important to consider the social context in which it is practiced. It is not enough to simply understand the technical aspects of security; it is also important to understand how social dynamics affect how individuals and groups approach information security. References California Institute of Technology. (2021). The Social Dynamics of Information Security. Retrieved from https://research.caltech.edu/tssg/papers/Social_Dynamics_of_Information_Security.pdf Falkon, J. (2020). Understanding Social Dynamics of Information Security. Medium. Retrieved from https://medium.com/@jfalkon/understanding-social-dynamics-of-information-security-d55259fbf7fd