The generation gap. It's a term that has been used for decades to describe the differences between people in various age groups. Corporations are constantly considering what makes different generations tick when it comes to recruiting and retaining employees. But security experts say companies also need to examine age-based perspectives and habits when it comes to risk assessment and policies.

Cultural analysts generally divide today's workplace personnel into three generations: Baby Boomers, Generation X and Generation Y, also known as Millennials. The stereotypes typically go like this:

• Gen Y employees, workers born after 1980, are tech savvy and have a short attention span

• Baby Boomers, born between 1946 and 1965, are loyal and dependable, the original workaholics

• And Gen Xers, once known as the slacker generation born between 1965 and 1980, tend to be cynical and independent.

Companies need to relate to all perspectives in order to create and communicate effective security policies as well as to diffuse 'potentially explosive situations.'

Stereotypes are useless for predicting the actions and reactions of any one individual. Yet these characteristics do tend to ring true in the workforce at many organizations, according to Roberta Chinsky Matuson, president of Human Resource Solutions, a US-based consultancy that regularly advises corporations on generational differences. Companies need to find ways to relate to all perspectives in order to create and communicate effective security policies as well as to diffuse what Matuson terms "potentially explosive situations."

"From a security standpoint there is a lot of opportunity for misunderstandings," said Matuson. "We need to educate people about what those are."

According to the security and HR experts CSOonline spoke with, each generation is prone to engage in risky behavior of different types, and may not understand how their habits are compromising a company's risk level. A clear example is recent research from security software-maker Symantec. The survey, which was released earlier this year, found that IT managers are at odds with Millennial workers. Among respondents, 66 per cent of Millennials said they use Web 2.0 technologies, such as Facebook and YouTube, while at work. Only 13 per cent of older workers admitted to logging on to these kinds of Web sites in the office. Meanwhile, Symantec also surveyed IT managers and 50 per cent said they have policies specifically banning Web 2.0 applications such as social networking, iTunes, streaming video, and gaming applications. [See Web 2.0 Applications and Sites (and Security Concerns) for specific examples of such sites and application and their attendant risks.]

"For Millennials, there is more blurring of the lines between work and home," said Samir Kapuria, a managing director with Symantec Advisory Consulting Services, the group that conducted the survey. "They tend to use what they have at home while at work, and this is really forcing corporations to rethink IT risk management."