Reward Mechanisms

• Monthly Bonuses
  • I think this reward would be especially effective simply due to human nature. Everyone wants to make more at the job they have, so employees that are noted to have exemplary cybersecurity conduct will be given a bonus at the end of each month, to encourage friendly competition in regard to who can be the most secure employee. 
• Additional Days of Paid Vacation
  • Similar to the previous reward, this will be awarded to employees who exhibit excellent security inhabits. In fact, it could be an alternative to a monthly bonus so that the employees get a choice.
• Employee Retreats
  • For those employees that continue to exhibit exemplary habits over the course of their employments, a biannual employee retreat will be held, where they are able to vote on one of a few vacation locations to spend a week with their families. This encourages a continued adherence to strict cybersecurity protocol.
• Review for Promotion
  • This reward shows all employees that the safer they are with their logins and behavior online the more likely they are to be considered for advancement, encouraging even those that don’t typically receive the other awards to adopt/continue secure habits.

Sanctions

• Employee Probation
  • When employees commit a particularly egregious cybersecurity error, specifically one that leaves the company/customers at risk, they may be put on probation, where they are still able to work but must do so under increased surveillance. This is more of a psychological sanction, as the shame they feel for their mistake will make them less likely to repeat it.
• “Rehabilitation” Classes
  • This sanction could potentially go hand-in-hand with the previous. Those employees on probation would be forced to go to remedial cybersecurity courses so that they can be reminded of safe practices and procedures.
• Workplace Suspension
  • If an employee continues to exhibit bad cybersecurity ethic, they may be placed on a temporary suspension from work while the company decides whether or not to continue employing them. This would encourage employees to learn from their mistakes so as not to become repeat offenders.
• Review for Termination of Employment
  • If an employee commits a slight especially “horrific” that puts the company/customers at a very high risk or actual results in harm to either entity, the employee might be instantly put under review for termination. This shows employees that we have little tolerance for large mistakes or even intentional attacks against our cyber network.