A people pleaser is someone who feels strong pressure to gain approval by avoiding refusal. In cybersecurity, this matters because attackers often exploit politeness, urgency, and the fear of disappointing others. A person who hesitates to say no may be more likely to click a link, share information, approve a request, or skip a verification step just to keep things moving and avoid conflict.
This trait is not a flaw by itself, but it can become a security risk when it overrides process. Strong defenses depend on people feeling allowed to pause, verify identity, and challenge unusual requests. Teams reduce this risk with clear approval workflows, role-based access, security training that normalizes refusal, and a culture where “I need to confirm” is treated as good practice. In phishing and social engineering attacks, the ability to set boundaries is often as important as technical controls.