EPISODE · May 21, 2026 · 14 MIN
They're Not Breaking the Rules. The Rules Are Broken
from The Awareness Practitioners · host Risky Creative
Nearly a thousand people were using a tool that legal wanted to block. Instead of blocking it, we asked why they were all using it in the first place. That question changed everything.In this episode, I take a concept from urban planning called desire paths and apply it to security awareness. A desire path is the shortcut worn into the grass where people ignore the official route and walk where it actually makes sense. Your organisation is full of them. Every workaround, every unsanctioned tool, every file emailed instead of uploaded to the portal.Most organisations respond by blocking the shortcut. The research says that makes things worse. So what should practitioners do instead? Watch where people are actually walking.
What this episode covers
Nearly a thousand people were using a tool that legal wanted to block. Instead of blocking it, we asked why they were all using it in the first place. That question changed everything.In this episode, I take a concept from urban planning called desire paths and apply it to security awareness. A desire path is the shortcut worn into the grass where people ignore the official route and walk where it actually makes sense. Your organisation is full of them. Every workaround, every unsanctioned tool, every file emailed instead of uploaded to the portal.Most organisations respond by blocking the shortcut. The research says that makes things worse. So what should practitioners do instead? Watch where people are actually walking.
NOW PLAYING
They're Not Breaking the Rules. The Rules Are Broken
No transcript for this episode yet
Similar Episodes
Mar 26, 2026 ·1m
Mar 19, 2026 ·34m
Feb 18, 2026 ·11m
Feb 11, 2026 ·45m