Action Bias and the Two Most Dangerous Words in Cybersecurity Incident Response: An Argument for More Measured Incident Response
Josiah Dykstra, Jamie Met, Nicole Backert, Rebecca Mattie, Douglas E. Hough · IEEE Security & Privacy · 2022
An inherent aspect of cybersecurity is managing incidents where people expect to see an immediate response. Action bias is our tendency to favor action over inaction because it makes us feel better—even if we have made things worse.