Welcome to the first instalment of our four-part series for Cybersecurity Awareness Month, where we'll explore essential communication strategies that can transform the way we approach security in the workplace. This series will focus on the power of language and how using the right words can encourage positive behaviours, reduce confusion, and ultimately strengthen your organisation’s security culture. Today, we begin with the transformative impact of simplified language—how clear and accessible communication can elevate your message and make it resonate with your audience.
Our words are powerful. They can inspire, encourage, and empower people. The way we shape and deliver sentences influences how the listener perceives our language. Language can be taken as either positive or negative and significantly impacts communication. Understanding the difference between positive and negative language is the key to mastering the art of positive language.
Positive statements can inspire motivation, as seen in stirring speeches at political rallies, while negative ones create limitations. Positive language also adopts a proactive approach, while negative language provokes a more reactive approach. From a scientific point of view, positive words stimulate the brain’s frontal lobes, while negative words trigger increased activity in the amygdala (the brain's fear centre).
A range of linguistic techniques can be used to achieve positive language. They can be applied in all contexts, including security communications within organisations. By using the right words, structure, and timing, organisations can empower their people, improve security behaviours, and contribute to a robust security culture.
One way to achieve effective communication is by using plain and simple language. Some people believe that using simple language can make a conversation seem less intelligent or offend the listener. However, this idea comes from the misconception that using complex words and long sentences makes communication more professional. Yet, American political and communications consultant, Frank Luntz, believes that good communication is clear, simple, and organised. Making things too complicated can lead to confusion and misunderstanding. The simpler an idea is explained, the easier it is for people to understand.
For instance, try to remove any unnecessarily additional or complex words when getting your message across. This will help your message reach the intended audience more clearly. For example:
Complex language
"The commencement of the project is scheduled for the upcoming week, and its completion must be achieved by the close of business on Friday."
Simple language
"The project starts next week, and we need to finish it by Friday."
An example of poor Security communications would be
“We have recently observed a spike in malware variant Duckbot using common TTPs including social engineering, mainly spearphishing. We require you to be vigilant for this attack vector by identifying and reporting suspicious emails in your inbox”.
Alternatively, positive and simple communication examples:
“Are you a cyber protector? We need your help with protecting the business; there have been more instances of phishing attacks recently that are trying to send malicious software called “Duckbot” to our people. The giveaways for these emails are:
- They come from webmail addresses
- The main email body mentions ducks a lot
If you receive one of these, please help us stay safe by reporting it to our IT team. Thank you for your help. “
So just like that, with clearer, simpler language Security leaders can instantly improve comms with their teams and across the whole organisation. Even though it may be challenging, especially when discussing technical security topics, keeping communication easy to understand is important to maximise impact.
Simplifying language is not about dumbing down the message but making it accessible and impactful for everyone. Clear and concise communication fosters understanding, reduces confusion, and encourages positive action. Whether you're talking about everyday tasks or complex security issues, straightforward language can help bridge gaps and ensure your message is heard and understood. After all, the more approachable your language, the more likely people are to engage, respond, and contribute to a positive, secure environment.
Take a moment to evaluate your own communication style. Are you using clear, simple language that encourages understanding and positive action? Challenge yourself to simplify your next message, whether it's an email, a security update, or a conversation with a colleague. By doing so, you'll foster better collaboration and contribute to a stronger, more secure organisation.
Stay tuned for our next blog in the series, where we'll dive into the art of emotional language. We’ll explore how harnessing emotions in communication can inspire action, build trust, and make your cybersecurity messages even more impactful. Simplifying your language is just the first step—next, we’ll show you how to connect on a deeper, emotional level with your audience.