Increasing compliance -TEISS® : Cracking Cyber Security

Culture & Education / Increasing compliance

Increasing compliance

A highlight of #teissLondon2018 was Evie Monnington-Taylor’s discussion of how the findings of behavioural economics (or “nudge theory”) can be used to change people’s behaviour.

How do we encourage people to follow the rules? There are sticks of course. And there are carrots. But sometimes sticks don’t work (think donkeys here!) and carrots are simply too expensive. So what do you do to change people’s behaviour?

Evie Monnington-Taylor gave a fascinating talk about how nudge theory can be used to push people along the path you want them to take. She started by describing the traditional levers that organisations use: rules and policies; training and information; and incentives (sticks and carrots).

However, she stressed that no behavioural lever will work if at the same time you put obstacles in the way of people behaving how you want them to behave. And conversely, if you make a particular behavioural pathway easy for people they are likely to take it:

  • A change to automatic enrolment in pensions has led to a significant rise in people taking up work pensions: people tend to stick with the status and so in this case, people had actively to opt out of pensions
  • Deaths from paracetamol poisoning fell sharply after the pills were put in bubble packs and sold in smaller quantities: people had to consider suicide for longer and make a greater commitment to it
  • Tax returns went up when an email directed people to the form rather than a web page on which they could find the form: this removed a small friction, making it easy for people to behave in the desired way

Ms Mornington-Taylor outlined some other ways that behaviour can be influenced. One powerful method is to “prove” that something is worth doing by showing that other people do it.

Marketers often use this technique for instance by saying how many people have bought a certain item. The tax office used the same technique when they included the sentence “Nine out of ten people pay their tax on time” in a letter.

Another commonly used technique is to tell a human story. Just as marketers show the happy consequences of buying a certain product, so the Police frequently use information about deaths and injuries to reduce speeding.

There are of course many nudge techniques. And this fascinating and entertaining presentation gave us an illuminating glimpse of the power of nudge. Very much something for CISOs to add to their toolbox.

Evie Monnington-Taylor is Senior Advisor at Behavioural Insights Ltd, a company set up by the UK Government’s Cabinet Office to use behavioural science to assist with the delivery of public policy.

You can download Evie's slides along with 27 other slides by completing the short form below.

The following two tabs change content below.
Head of consulting at TEISS Jeremy is a highly experienced author, trainer and consultant who has worked in digital strategy, marketing and cyber security for 25 years. His special area of interest is how people engage with technology, sometimes known as "human factors"

Latest posts by Jeremy Swinfen Green (see all)


Get the latest cyber news in your inbox

Join our community of cyber professionals today!