Security Policy: Balancing Technology, Policy, and Culture

In today’s digital world, secure communication is crucial. Recently, a U.S. Government security advisor, Michael Waltz, accidentally added a journalist to a private group discussing sensitive national security matters.. (here) This sparks a debate about technology’s role in securing communication, especially in workplaces. Let’s explore how organizations can balance productivity, user preferences, and security.

The Tech Dilemma: How Secure Should Communication Be?

It’s a tricky situation. On one hand, there’s a strong argument for keeping sensitive conversations on secure, company-controlled platforms. Many businesses use iPhones and Microsoft Teams to ensure the organization controls shared information. Teams offers robust security features to prevent issues, like adding external parties to a chat group. It’s part of our setup questions in our IT Support Services.

However, there’s a catch: people prefer ease over security. Microsoft Teams is functional but not always intuitive, especially on mobile. Apps like WhatsApp and Signal are popular because they’re easy to use and feature-rich. And I can consult with my doctor via text message, why can’t I do that for work too? Employees often resist using a formal app like Teams, as it feels less efficient.

The Classic Battle: Efficiency vs. Security

Users are most productive when using familiar tools. If you ask an iPhone user to switch to an Android, they’ll resist. The same applies to apps—switching from WhatsApp or Signal to Teams can feel like a downgrade. Many businesses block apps like Signal and WhatsApp on company devices, but does this solve the problem?

Not really. Blocking apps on company phones doesn’t stop employees from using them on personal devices. Company devices are secured, but you can’t control personal phones. Employees can still share sensitive information through personal apps, creating new security risks.

Balancing Control with Flexibility and Security

Trying to control every piece of software employees use is nearly impossible. People will use the apps they like, regardless of company restrictions. It’s not just a tech challenge—it’s a cultural and policy issue. Organizations must understand what software employees prefer and secure it as best as possible.

One critical question is whether companies should allow employees to use personal devices for work. For instance, during the COVID-19 inquiry, the UK government faced criticism for ministers using WhatsApp to make crucial decisions, many of which were lost. How can organizations protect sensitive discussions on personal devices and ensure they’re documented and accessible?

This is why businesses are adopting better policies, stronger enforcement, and improved technology to balance security with user preferences.

The Key to Managing Risks: Culture and Policy

At the end of the day, security is about more than just technology. It’s about building a culture of responsibility and clear communication. Organizations need policies that ensure employees understand the risks and consequences of mishandling sensitive information.

Consider this scenario: An employee calls in sick via WhatsApp, and their manager responds with discriminatory comments. If this exchange happens outside formal communication channels, it may escalate into a legal issue. However, if the company policy prohibits WhatsApp for work, the employee will know not to use it. Clear policies help set expectations for appropriate communication.

The Importance of Setting Boundaries

Clear boundaries are vital. Organizations must set clear expectations about how business communications should occur. Blocking apps isn’t enough. Companies must foster a culture where secure communication channels are the norm. Employees should understand the risks of using personal devices for work communications.

Training and awareness campaigns are essential. Employees must understand the risks of insecure apps. By educating your team and providing the necessary tools, you can reduce the risks of data leaks and communication breaches.

Final Thoughts: The Changing Landscape of Communication

Technology constantly evolves, making communication security increasingly challenging. The goal isn’t just about choosing the right tools or setting strict policies. Businesses need to adapt to the reality that employees gravitate toward the tools that increase productivity. Companies must balance providing secure communication channels with respecting user preferences.

Ultimately, setting clear policies, promoting a security-conscious culture, and using technology as a tool—not a barrier—are key. Need help finding the right balance? Our team is here to assist. Reach out today to keep your organization secure while maintaining employee productivity. Our IT Consultancy services can help here.

Effective workplace communication goes beyond sending messages. It’s about protecting, managing, and handling information securely. Whether using Teams, Signal, or WhatsApp, understanding the risks and setting proper policies will help your business navigate this evolving landscape.