Programs Don’t Sabotage, People Do
February 7th, 2007 by morganAn interersting finding in IT World relating the people who commit sabotage in the workplace and their work behaviors. The article details that …
The research suggests that potential troublemakers should be easy to spot. Nearly all the cases of cybercrime investigated were carried out by people who were “disgruntled, paranoid, generally show up late, argue with colleagues, and generally perform poorly.”
From an organizational point of view, this seems pretty obvious. People who aren’t happy and aren’t performing are the most likely to act out. This isn’t an IT specific thing, I would guess you see the same behavior in people who work in finance and embezzle company funds.
The article goes on …
According to security management vendor Calum Macleod of Cyber-Ark, most organizations are leaving themselves exposed by “not paying due care and attention to the people who are charged with looking after their systems and applications.” Even outsourcing cannot resolve the problem fully, he said.
This sounds like a wise thing. Organizational problems are the responsibility of the organization, and the responsibility isn’t just to punish or to root out bad seeds. The responsibility is to make a culture where this sort of thing is unlikely to happen, then to monitor for any possibilities that may arise.
While it is individuals that perform these acts, they don’t happen in a vacuum and often there are components of the behavior that can be prevented cheaply, quickly, and easily. Don’t discount your people by ‘profiling’ out suspects and thinking that will solve your problems.





