Social Engineering Blogs

An Aggregator for Blogs About Social Engineering and Related Fields

MAD Security Blog April 4, 2013

Security Awareness Content: Challenges of Using Reinforcement

Imagine that you are the head of security awareness at an organization (not a stretch for some) and have been charged with getting people to report issues to the help desk. You decide, in your infinite wisdom, to encourage them to report issues to the help desk by giving them $1 each time they report a valid problem. The week after implementing the new reward program the number of issues reported to the help desk has increased 100 fold. You program is getting great results. Not only are 99% of phishing attacks getting reported but shoulder surfing is down, you know when devices are lost, and compromised computers are being reported to the help desk rather than being discovered by them. Things are coming up roses.

See any problems here?money

Of course you do! The budget for this program is going to be INSANE! No practical business will support paying $1 for each ticket at the help desk for any longer than 6 months- MAX. This leads into the second, and biggest problem with using reinforcement. If the only reason that users are reporting issues is because of a reward, the minute that the reward is removed the desired behavior plummets. Unless you can replace the reward with something of equal subjective value their incentive is gone and the trained behavior is lost.

*Finding something of equal subjective value to cash on a large scale is damn near impossible. I only say ‘damn near’ because I’m sure there is some magical place out there that can do it but I’ve never come across it. *

Finally, lets say that instead of $1 you gave them a free lunch- because your users really like lunch. How long will that be an effective reward? My guess is that after about a month of free lunches have been accrued the value of the reward will go down dramatically and so will your behavior. Suddenly, you have to switch the reward to something else – of equal subjective value- to keep them responding.

Vicious cycle anyone?

How to Use Reinforcement to Your Advantage

As you can see, reinforcement is a tricky thing but when can we use it to change behavior.

Lets go back to the help desk problem. Instead of paying for each help desk ticket, indefinitely, you make it a charity fundraiser for the holiday.

“Every time you call the help desk, $1 will be donated to buy gifts for families in need. Weekly progress will be reported!”

Some of you might look at this and say “even if we had the budget for that, we still have the same problem of removing the reward and loosing the behavior once the fund raiser was over” but consider two very important differences.

1-    The reinforcement has a clearly defined ‘end point’ that has nothing to do with the user, the company, or their behavior but is a product of the reward. The gifts have to be bought at some point otherwise the fundraiser was pointless. Essentially you are isolating the reinforcement contingency and increasing your chances of the behavior persisting after.

-Not to mention periodic fundraisers to increase behavior –if needed- are MUCH more sustainable to the budget than constant reinforcement.

2-    The second and most important is how closely the reinforcement (e.g., $1) and behavior are paired. In our first example the employee saw the DIRECT effect of calling the help desk on their pay check therefore it was very closely paired to their behavior

Just like if Pavlov’s dogs were fed EVERY time the research assistant came in.

The minute that the user realized the reinforcement was removed, the behavior that followed stopped (i.e., calling the help desk).

Back to Pavloc: The dogs would eventually stop salivating once they knew that the assistants were never going to feed them.

In our second example, the users see the money increase but it is NOT directly related to each time they call the help desk. Instead it goes into an anonymous pool that may jump $100 a week even if they just called the help desk once. Since the reinforcement is not closely tied to each behavior they perform, the chances of the behavior persisting after the reinforcement is removed increases significantly.

*For a more detailed look at this process see my previous blog on Pavlov and his dogs.

Based on all of this, be careful when using reinforcement. While it may provide an immediate result, it’s something that needs budget and time to maintain. If used wrong, you will just be setting yourself up for an uphill battle.

Filed Under: Behavior, Behavior Change, culture, learning, Metrics, Motivation, Phishing, Security, Security Awareness

pattiwoodblog April 3, 2013

Body Language of Jodi’s Father

Click the link below to hear Patti’s insights on the body language of Jodi Arias’ father during interrogation as she shares them on the Dr. Drew Show this past Tuesday night.

http://www.youtube.com/watch?v=2ammBtcTaig&feature=youtu.be

Patti Wood, MA, Certified Speaking Professional – The Body Language Expert. For more body language insights go to her website at www.PattiWood.net. Check out Patti’s website for her new book “SNAP, Making the Most of First Impressions, Body Language and Charisma” at www.snapfirstimpressions.com. Also check out Patti’s YouTube channel at http://youtube.com/user/bodylanguageexpert.

Filed Under: Nonverbal Behavior

Persuasive Blog April 3, 2013

7 Ways to Prevent Office Distractions

minimize office distractions

We’ve all been there…  On the way to work, you’re brimming with enthusiasm and great ideas – ready to hit the ground running on a productive work day.  But the second you sit down at your desk, you’re hit with distraction after distraction.  Coworkers need your immediate feedback, emails keep popping into your inbox and your phone won’t stop ringing.

How are you ever supposed to get anything done amidst all of these distractions?

The reality is, all of us face distractions – whether we work in office environments, coffee shops or home offices.  You can’t avoid distractions entirely while working, but you can take steps to minimize them.  Give any of the following strategies a try in order to amp up your productivity and prevent distractions from throwing you off track:

Tip #1 – Turn off automatic alerts

Between the notifications that pop up in response to new messages on your smartphone and the Outlook flag that appears whenever you get a new email, automatic alerts can seriously disrupt your productivity.  The simple solution?  Turn them all off!  Really, there are very few emergencies, and you’ll likely find that the amount you’re able to get done in the absence of these distractions more than makes up for any delayed responses you might be forced to issue.

Tip #2 – Schedule time for yourself

Scheduled meetings are sacred time on most people’s business calendars – so why not take advantage of the fact that most people won’t interrupt these periods in order to get more done?

First, figure out when you’re most productive during the work day.  Then, schedule a 1-2 hour long “meeting” on your calendar during which time you won’t allow yourself to be interrupted.  Teach others to respect this time by ignoring calls or in-person requests and you’ll free up a nice chunk of time to work with minimal distractions.

Tip #3 – Wear headphones

Wearing headphones while working is one of the best signals you can give to tell others that you don’t want to be interrupted.  You don’t have to listen to music with your headphones on to achieve this effect – simply wearing them is enough to dissuade most people from disrupting your productivity with their own distractions.

Tip #4 – Clean up your work environment

If a cluttered desk equals a cluttered mind, it’s possible that picking up your work environment could have a positive effect on your ability to focus without distractions.  But don’t limit your cleaning efforts to the piles of papers that have been sitting on your desk forever.  Clean up your browser icons, bookmark lists and old digital “to do” lists in order to minimize the digital clutter that could also prevent you from focusing at peak efficiency.

Tip #5 – Turn on website blocking tools

Work distractions don’t always come in the form of interruptions from coworkers.  In plenty of cases, we’re our own worst enemies when it comes to digital distractions.  Sure, you might tell yourself that you just need a few minutes of fun browsing in order to get back to work – but can you really justify this type of time-waster once you’ve blown through hours of could-have-been productive time?

The easiest way to minimize the amount of time you waste on your favorite websites and social networks is to install website blocking tools that prevent you from accessing these pages at different times.  For example, a few great options include Leechblock for Firefox and Nanny for Chrome.  Try to install a website blocking tool on every browser that’s installed on your computer in order to minimize your ability to outsmart these distraction-blocking systems!

Tip #6 – Look busy

If none of the other strategies described here have succeeded in minimizing work distractions, you can always try looking frazzled.  Even if you’re as calm as can be, act as if you’ve got more on your plate than you could ever possibly handle.  When coworkers approach your desk to distract you, give them the crazy eyes that say, “Back away slowly – I’m on the edge here!”

It sounds silly, but it’s an effective way to end distractions before they start.  Just be careful not to abuse it.  If your boss catches you looking stressed out too often, he might assume that you aren’t capable of handling your job – making you less likely to qualify for raises and promotions.

Tip #7 – Hide

One final option for minimizing office distractions?  Get out of there!  Sometimes, there’s nothing that you can do to stop coworkers from interrupting you or your boss from piling on more work than you can handle.  In these cases, do whatever you need to do to remove yourself physically from the distractions!

You could use the number of distractions in your workplace as leverage to negotiate a remote work arrangement.  If that isn’t an option, scheduling a “doctor’s appointment” could buy you a few hours to work from home in a distraction-free environment.  Again, you shouldn’t abuse this tip, but you should keep in mind that the amount you’re able to get done by “hiding” from your distractions could outweigh any concerns that your frequent absences mean you’re an unreliable employee.

Got any other tips for minimizing distractions in the workplace?  Share them below in the comments so that everybody can benefit!

Filed Under: Techniques

  • « Previous Page
  • 1
  • …
  • 416
  • 417
  • 418
  • 419
  • 420
  • …
  • 559
  • Next Page »

About

Welcome to an aggregator for blogs about social engineering and related fields. Feel free to take a look around, and make sure to visit the original sites.

If you would like to suggest a site or contact us, use the links below.

Contact

  • Contact
  • Suggest a Site
  • Remove a Site

© Copyright 2025 Social Engineering Blogs · All Rights Reserved ·