In a recent incident, an IT cybersecurity professional cleverly demonstrated the pitfalls of micromanagement. The employee, who relies on multi-factor authentication (MFA) for accessing critical systems, faced a directive from his boss banning the use of personal electronic devices, including mobile phones. This policy, aimed at tightening security but lacking practical consideration, led to unintended consequences.
The employee, known as OP, works in a field where MFA is crucial for safeguarding sensitive data. The company does not provide cellphones to lower-tier employees, leaving personal devices as the only means of accessing necessary applications. When the boss issued a memo prohibiting personal mobile phones, OP decided to comply in a way that exposed the flaw in the directive.
Image credits: Anna Shvets (not the actual photo)
Without delay, OP uninstalled all MFA-related apps from his phone and requested desktop versions, which, as it turned out, did not exist. This act of malicious compliance not only adhered to the new policy but also highlighted its impracticality. The IT support team was baffled, as no desktop alternatives were available.
As a result, the boss found himself entangled in the new approval processes he had initiated, unable to expedite the installation of necessary software. Meanwhile, OP was free to browse the internet, showcasing how rigid policies can backfire when not thoughtfully implemented. The situation underscored the importance of understanding the operational needs of employees before enforcing sweeping rules.
Image credits: Zen Chung (not the actual photo)
Reddit is likely to give this guy a virtual high-five!
The top comment states what should be obvious.
And this person says OP could not have responded better.
When they think they’re smarter than us, it’s best to let them prove themselves wrong.
Because this is not how good leaders behave.
Other people knew exactly what OP was talking about here.
OP so calmly and quickly picked the right response.
I mean, hats off to him!