Why It's Important
A trauma-informed approach to communication acknowledges that people experiencing a security incident—whether a personal scam, a data breach, or online harassment—may be in a state of distress or trauma. This approach prioritizes creating a sense of safety, trust, and collaboration. For an organization, communicating in this way prevents re-victimizing individuals, builds long-term trust, and makes it more likely that people will report incidents in the future. This supports community well-being and economic resilience by ensuring that when incidents happen, the human impact is managed with care, helping people recover and regain the confidence needed to engage in the digital world.
History
The principles of trauma-informed practice originated in the fields of mental health and social work in response to a deeper understanding of the psychological and physiological effects of trauma. Its application to the digital and cybersecurity world is a more recent, but vital, development. It has been driven by a growing recognition that online harms have real-world emotional consequences. Canadian organizations at the forefront of crisis support, like Kids Help Phone, have long pioneered communication styles that are non-judgmental and empowering, providing a model that is now being adapted to the context of cybersecurity and fraud support.
Examples
Kids Help Phone: Their communication with youth via text and phone is a prime example of a trauma-informed approach, focusing on creating a safe, confidential space where a young person feels heard and has control over the conversation.
Provincial Victim Services: These government-funded programs across Canada are trained to support victims of all crime, including online fraud, using principles of respect, validation, and empowerment to help them navigate the reporting and recovery process.
BC Society for Male Survivors of Sexual Abuse: This organization provides online support services, demonstrating how trauma-informed principles of safety, confidentiality, and choice can be applied in a digital service-delivery environment.
Hope for Wellness Help Line: Offers immediate mental health counselling and crisis intervention to all Indigenous peoples across Canada, available in multiple languages, demonstrating culturally-informed and trauma-informed support.
Software and Tools
Secure Communication Platforms (Signal): Using end-to-end encrypted platforms for sensitive conversations ensures privacy and helps build the trust that is foundational to a trauma-informed approach.
Telehealth Platforms (Doxy.me): For organizations providing direct support, a simple and secure telehealth platform can create a confidential space for conversation without requiring complex software or sign-ups.
Anonymous Feedback Tools (SimpleSurvey): Using Canadian-hosted survey tools to gather feedback anonymously allows people to share their experiences and needs without fear of judgment, providing choice and promoting collaboration.
Internal Knowledge Base: A simple, internal wiki or shared document can store communication templates and key phrases that are aligned with trauma-informed principles, ensuring a consistent and supportive team response.
AI Considerations
AI-powered chatbots are increasingly used as a first point of contact for support services. For this to be trauma-informed, the AI must be carefully designed. It should immediately offer the option to connect with a human, use clear and non-judgmental language, and never try to simulate empathy. An AI's role should be limited to safely gathering basic information and routing the person to the right resource. The core of a trauma-informed interaction—validation, empathy, and connection—must remain a human-to-human process.
FAQ
It means assuming that anyone experiencing a security incident may be in distress, and interacting with them in a way that prioritizes their emotional and psychological safety over simply collecting information.
Anything that implies blame, such as "Why did you click on that link?" or "Didn't you think that was suspicious?" This creates shame and discourages people from seeking help.
Your role is not to provide therapy, but to listen with empathy, validate their feelings ("That sounds incredibly frustrating"), and help them access practical resources.
No, it is also for internal communication. If a colleague makes a security mistake, a trauma-informed response (supportive, no-blame) makes it more likely they will report it quickly next time.
Acknowledge their anger as a valid response to a violation. Say something like, "You have every right to be angry about this." Often, having their feelings validated is the first step in de-escalating the situation.
Pro Tips
Develop the ability to communicate about breaches or scams in a trauma‑informed manner. Practise using clear, empathetic language that avoids blaming the victim, acknowledges emotional impact, and offers concrete next steps and support resources. By handling difficult conversations compassionately, you help others feel safe coming forward and reinforce a culture of support.
Checklist
External Resources
Mental Health Commission of Canada (MHCC): Provides resources, training, and research on mental health, including trauma-informed practice.
Wellness Together Canada: A federally funded portal offering free and confidential mental health and substance use support, available 24/7.
211 Canada: A free, confidential service that connects people to community, social, and government services in their area, including crisis and mental health support.