← Back

Wire · operational-macro

When Restrictive Cybersecurity Policies Backfire

Published

22 October 2026

Topic

operational-macro

◆ Sectors

Cybersecurity

◆ Source

Read at hbr.org →

◆ Verified

Fusion42 · 22 October 2026 · Fusion42 review

Research shows that overly restrictive cybersecurity policies can trigger employee reactance, leading to denial of cybersecurity risks and covert use of unapproved AI tools. Policies that respect autonomy and reinforce risk even when relaxed reduce this denial and improve compliance.

This Wire brief sits within Fusion42's coverage of Cybersecurity.

◆ ◆ The Wire takeaway

You need to rethink how you implement cybersecurity rules to avoid making your team push back and hide risky behaviour. Giving employees a sense of choice and clearly confirming risks after loosening controls stops them doubting your security efforts.

◆ Coverage

1 source · 22 Oct 2026

◆ Related on Wire

◆ Topics

Cybersecuritycybersecurityemployee-behaviourreactanceai-toolspolicy-effectiveness