What principle covers the idea that security mechanisms should not impede users' productivity?

• A. Psychological Acceptability
• B. Complete Mediation
• C. Encapsulation
• D. Separation of Privilege

Answer: (A)

The principle of psychological acceptability focuses on ensuring that security mechanisms are designed in a way that does not hinder user productivity. This means that security measures should be user-friendly and intuitive, allowing users to carry out their tasks without frustration or significant slowdown. If security mechanisms are too complex or cumbersome, users might resist following them, which can lead to vulnerabilities in the system as they look for workarounds. Therefore, the idea is to strike a balance that maintains security while still promoting an efficient and productive work environment.

In contrast, the other principles reflect different concepts within security practices. Complete mediation deals with ensuring that every access request is checked against security policies to prevent unauthorized access. Encapsulation pertains to the bundling of data and its associated methods in a single unit or class, often with access restrictions. Separation of privilege involves dividing tasks and permissions into separate components to protect sensitive information and prevent misuse. While these principles are essential for creating a secure environment, they do not specifically emphasize the need for security measures to be psychologically acceptable and non-interfering with user productivity, which is at the core of the psychological acceptability principle.