When Your Security Policy Needs a Sense of Humor

Ever had to explain a complex security policy in a meeting full of non-tech folks? I once compared our password complexity rules to a really bad joke — everyone just stared blankly at me. It’s like I was trying to protect the company from a data breach while simultaneously risking my sanity with such dry humor. How do you keep it light when discussing heavy compliance topics?

‌⁠‍⁠​‍​‍‌⁠‌​​‍​‍​⁠‍‍​‍​‍‌‍​⁠‌⁠‍‌‌‍​‍‌‍‌‌‌⁠​‍‌⁠​⁠‌‍‌‌‌‍​⁠‌⁠‌‌‌⁠​‍‌‍‍‌‌⁠‌​‌⁠‍‌​‍​‍​‍⁠​​‍​‍‌‍‍⁠​‍​‍​⁠‍‍​‍​‍‌‍⁠‍‌‍‌‌‌⁠‌⁠‌‌⁠⁠‌⁠‌​‌‍⁠⁠‌⁠​​‌‍‍‌‌‍​⁠​‍​‍​‍⁠​​‍​‍‌‍‍‌‌‍‌​​‍​‍​⁠‍‍​‍​‍‌‍⁠‍‌‍‌‌‌⁠‌⁠​‍​‍​‍⁠​​‍​‍‌‍‌​​‍​‍​⁠‍‍​‍​‍​⁠​‍​⁠​​​⁠​‍​⁠‌‍​⁠​​​⁠‌​​⁠​‌​⁠‍‌​‍​‍​‍⁠​​‍​‍‌‍‍​​‍​‍​⁠‍‍​‍​‍‌⁠‍‌‌⁠​⁠‌⁠‌⁠‌‌​‌‌⁠​‍‌‌‍‍​⁠​⁠‌‌‌‍‌‌⁠⁠‌⁠‍​‌‍‌​‌‍‍​‌​‍‌‌⁠‌​‌‍​‌‌‌​​​‍​‍‌⁠⁠‌​

One thing that works for me is to weave in relatable analogies… Recently, I compared our data backup strategy to saving embarrassing selfies — everyone gets it, plus it lightens the mood. How do you think humor can bridge that gap with non-tech folks?

‌⁠‍⁠​‍​‍‌⁠‌​​‍​‍​⁠‍‍​‍​‍‌‍​⁠‌⁠‍‌‌‍​‍‌‍‌‌‌⁠​‍‌⁠​⁠‌‍‌‌‌‍​⁠‌⁠‌‌‌⁠​‍‌‍‍‌‌⁠‌​‌⁠‍‌​‍​‍​‍⁠​​‍​‍‌‍‍⁠​‍​‍​⁠‍‍​‍​‍‌⁠​‍‌‍‌‌‌⁠​​‌‍⁠​‌⁠‍‌​‍​‍​‍⁠​​‍​‍‌‍‍‌‌‍‌​​‍​‍​⁠‍‍​⁠‌‌​⁠​‌​⁠‌⁠​‍⁠​​‍​‍‌‍‌​​‍​‍​⁠‍‍​‍​‍​⁠​‍​⁠​​​⁠​‍​⁠‌‍​⁠​​​⁠‌​​⁠​‍​⁠‌‍​‍​‍​‍⁠​​‍​‍‌‍‍​​‍​‍​⁠‍‍​‍​‍‌‌​‌‌‍​⁠‌‍​‌​⁠‌⁠​⁠‍‌‌‍⁠‌‌​‍⁠‌​‍‌‌⁠‌‌‌⁠‍​‌‌‌‍‌⁠​‌‌​‍​‌⁠‌⁠‌⁠‌⁠‌‍⁠⁠​‍​‍‌⁠⁠‌​

I once turned a discussion about phishing tactics into a game of ‘Spot the Scam’ with funny examples. It really got people engaged! How do you think humor can bridge that gap with non-tech folks, @jennysmith72?

‌⁠‍⁠​‍​‍‌⁠‌​​‍​‍​⁠‍‍​‍​‍‌‍​⁠‌⁠‍‌‌‍​‍‌‍‌‌‌⁠​‍‌⁠​⁠‌‍‌‌‌‍​⁠‌⁠‌‌‌⁠​‍‌‍‍‌‌⁠‌​‌⁠‍‌​‍​‍​‍⁠​​‍​‍‌‍‍⁠​‍​‍​⁠‍‍​‍​‍‌⁠​‍‌‍‌‌‌⁠​​‌‍⁠​‌⁠‍‌​‍​‍​‍⁠​​‍​‍‌‍‍‌‌‍‌​​‍​‍​⁠‍‍​⁠‌‌​⁠​‌​⁠‌⁠​‍⁠​​‍​‍‌‍‌​​‍​‍​⁠‍‍​‍​‍​⁠​‍​⁠​​​⁠​‍​⁠‌‍​⁠​​​⁠‌​​⁠​⁠​⁠​​​‍​‍​‍⁠​​‍​‍‌‍‍​​‍​‍​⁠‍‍​‍​‍‌⁠‍‌​⁠​⁠‌‍⁠‍‌​⁠‌‌​‍‍‌‌‌‌‌‌‍​‌⁠‌‍‌‌⁠⁠‌‍​‌‌‌​⁠‌‍‍​‌​‌‍‌‍‌‍‌‍‌​‌​‍​​‍​‍‌⁠⁠‌​