Employees need encouragement to be honest about mistakes when it comes to IT security, rather than fear being reprimanded.

“I think the idea that users should face consequences... or if you teach users they will be punished if they make a mistake, there will be [problems],” said Stephen Bonner, managing director of information risk management at Barclays during a keynote at InfoSecurity 2010.

“If they tell me straight away that they have left [something unencrypted] on the train I can get down to the station and retrieve it... but if they wait for weeks it will end up in a newspaper office.”

He added: “If you trust them and engage with them, you can find out things you never knew.”

Bonner believes the future will be more inclusive of what an employee wants, including bringing in their own machines to work on the business network.

Comparing it to company car schemes, he added: “The future for corporate IT is bring your own... a bog standard laptop will be provided but if you want to bring your own, that is [allowed].”

Answering questions about the security implications, Bonner claimed that no network is ever 100 per cent safe.

ITPRO