Action Bias and the Two Most Dangerous Words in Cybersecurity Incident Response An Argument for More Measured Incident Response

An inherent aspect of cybersecurity is managing incidents where people expect to see an immediate response. Action bias is our tendency to favor action over inaction because it makes us feel better-even if we have made things worse.

Automated summary

A common characteristic in cybersecurity is the inclination to take action rather than doing nothing, even if it may worsen the situation.