(2009 AP Photo/Harry Hamburg)
Making the workforce aware and supportive is one of the most-important parts of a cybersecurity program. However, it is difficult to link your message with all the levels and roles in a company workforce.
A great way to make that connection is storytelling.
When I started as CISO at HCA Healthcare in the early 2000’s, we were struggling to put guardrails around the explosive growth in use of mobile devices. We received pushback from some business leaders who did not want to be bothered with controls or hinder use of these new tools. Neither did we, but we needed to find middle ground to protect our data and company, and our side of the debate was not being heard.
I met with the senior team to discuss mobile device security, and they were probably braced to hear me talk about all the scary things that could happen. While I did do some of that, it was wrapped in a story that grabbed attention and led to a positive response.
I was the security officer at the White House Communications Agency during the transition from George H. W. Bush to Bill Clinton. As you might imagine, we tightly controlled communications and had secure devices for the President. Prior to his election, however, Bill Clinton was accustomed to managing his own calls with his personal off-the-shelf mobile phone. Getting him to change was causing growing consternation as the inauguration drew near, and his team told us it was a non-starter to even ask. Without telling the whole story here - we put together a demonstration and briefing on the risks for President Clinton, and to his credit, he listened thoughtfully, understood our concerns, and surrendered his phone.
With possibly a little extra theater, I told the group of executives that story, highlighting the similar risks we faced if we didn’t protect our mobile communications. It got a great reaction - they loved the “behind the scenes at the White House” story, and like President Clinton they wanted to do the right thing to protect our mobile devices. Several of the execs invited me to come to their team meetings over the next few months, and almost always said, “Tell the Bill Clinton cellphone story!”
Stories with interesting personal experiences or inside information grab attention and provide a canvas for relaying the information you want people to hear. They can help people understand who you are, create empathy, and build trust. Stories also tap into emotions, making information more memorable and engaging.
Here are some suggestions for utilizing storytelling in business communications:
Connect with your audience:
Ensure your story has a clear point that connects to your bigger business message.
Don't be afraid to show vulnerability or past mistakes.
Delivery matters - enthusiasm and confidence in your storytelling will hold your audience's attention.
Make it believable:
Overly embellished stories lose credibility.
Back up your stories with facts.
Craft a compelling narrative:
Use relatable characters to make the information more engaging.
Showcasing a challenge that was overcome is a powerful storytelling tool.
Keep it concise– don’t let the story dominate your time.
Leave your audience with a clear action item or takeaway message.
Telling a story that resonates with your audience can inspire action and raise your profile as a leader. Make storytelling an impactful part of your communications and it will help you connect with your audiences and achieve your objectives.
Hold Fast and Stay True!
An excellent book on the art of storytelling in business is “The Perfect Story: How to Tell Stories that Inform, Influence, and Inspire” by Karen Eber.
She also has an outstanding TEDx talk - https://www.ted.com/talks/karen_eber_how_your_brain_responds_to_stories_and_why_they_re_crucial_for_leaders?language=en