Developing a Security Culture

What type of security culture do you have, and does this support the demonstration of the right security behaviours? 

Developing and sustaining an effective security culture is an essential component of a protective security regime and helps mitigate against a range of threats that could cause physical, reputational or financial damage to organisations. Security culture refers to the set of values, shared by everyone in an organisation, that determine how people are expected to think about and approach security. Getting security culture right will help develop a security conscious workforce, and promote the desired security behaviours you want from staff.

The benefits of an effective security culture include;

• A workforce that are more likely to be engaged with, and take responsibility for, security issues
• Increased compliance with protective security measures
• Reduced risk of insider incidents
• Awareness of the most relevant security threats
• Employees are more likley to think and act in a security conscious manner

Many organisations want to embed an effective security culture where security is a collective responsibility shared by everyone in an organisation. CPNI provide a variety of materials to help organisations to assess their security culture, and direct and shape their own security culture initiatives. Understanding what your current security culture is like, and how you would like it to be in the future is an important step towards shaping a culture that is fit for purpose. For more information about this visit the new SeCuRE 4 page now.