Chapter 8 - Common Sense and Common Knowledge

Abstract

This chapter highlights that the fundamental issue nowadays is that of common sense vs. common knowledge. One cannot expect people to behave with common sense if they do not have a common knowledge. If people do not have a grounding of common knowledge, they will not behave in a way that makes common sense. There are many areas where users do not demonstrate an understanding of common knowledge: passwords, home users who do not properly secure their computers, keeping anti-virus software updated. When there are widespread problems, there is clearly a failure in the way the security community is delivering their message. In a corporate environment, good security awareness programs are required. When the public is concerned, it is still unclear as to who is ultimately responsible for security awareness. When people have a sense of responsibility, they will behave securely. Unfortunately, most people do not have any responsibility, which is the underlying cause of security problems. There is so much out there to help people protect themselves. All they need to do is find out about them.