In japanischen Unternehmen führen 50 % der Cybersicherheitsverstöße zu Disziplinarmaßnahmen gegen den Mitarbeiter, selbst wenn dies unbeabsichtigt geschah. „Der Fokus liegt nicht darauf, wie der Fehler als gesamte Organisation hätte verhindert werden können. Er wird auf individuelle Nachlässigkeit zurückgeführt, und die einzige Lösung ist Bestrafung.“
https://toyokeizai.net/articles/-/938520
7 Kommentare
Shifting blame from the higher ups lack of foresight/innovation in Japan, name a more iconic duo
The same goes for getting sick.
In other news, Japanese companies and hierarchies are all shit.
I work in IT and this is endemic. There are some organisations here, mostly SMEs, that actually think about „how can we prevent issues from arising in the first place“ and try to implement threat detection, early warning systems, principle of least privilege etc. And then you have my other clients who go „no we don’t need the GRC module you have because our IT policy states that you can’t send sensitive data in mails“. Buddy, we’re not saying „your employees are deliberately breaking the rules“. We’re saying „accidents happen and you want to prevent those, not rely on policy“.
Japanese logic.
Then change absolutely nothing about how you do business, just tell people not to fuck up again…
Always protect the ~~daimyo~~ kacho. Then refuse to pay for tools or reorganization and order the other employees to continue the same work practices that forced the employee to cut security corners in the first place.
Now, where’s that innovation we need to compete in a global world?