Key points are not available for this paper at this time.
An inherent aspect of cybersecurity is managing incidents where people expect to see an immediate response. Action bias is our tendency to favor action over inaction because it makes us feel better—even if we have made things worse.
Dykstra et al. (Sun,) studied this question.