Security News > 2021 > January > How to implement mindful information security practices
Authors Randolph A. Kahn, owner of Kahn Consulting, and James Beckmann, counsel for Boy's Town, consider that question in their American Bar Association article, Creating a Mindful Information Culture.
In particular, they examine how a mindful information culture helps to mitigate risk by determining what's essential.
"This person possesses a combination of institutional knowledge and political savvy to help make the journey more productive and less painful." They add, "It is critical the person selected to build a mindful information culture has the right temperament and skill set."
Making an employee's life better is the key to eliminating the, "But this is how we have always done it" response and having employees become mindful stewards of the organization's information, which in turn builds a culture of awareness.
Achieving a mindful information culture: For the mindful information culture to move past short-term enthusiasm, Kahn and Beckmann suggest that-just like muscle memory automating physical movements-implementing repeatable and logical processes and directives will also become automatic.
"Culture is not a 'sometimes thing,' it is an 'all the time thing.' Building a mindful information culture can be achieved only by implementing a persistent, evolving cycle of assessing, planning, implementing, communicating, monitoring, resolving, and repeating."