ABSTRACT

Security Culture starts from the premise that, even with good technical tools and security processes, an organisation is still vulnerable without a strong culture and a resilient set of behaviours in relation to people risk. Hilary Walton combines her research and her unique work portfolio to provide proven security culture strategies with practical advice on their implementation. And she does so across the board: from management buy-in, employee development and motivation, right through to effective metrics for security culture activities. There is still relatively little integrated and structured advice on how you can embed security in the culture of your organisation. Hilary Walton draws all the best ideas together, including a blend of psychology, risk and security, to offer a security culture interventions toolkit from which you can pick and choose as you design your security culture programme - whether in private or public settings. Applying the techniques included in Security Culture will enable you to introduce or enhance a culture in which security messages stick, employees comply with policies, security complacency is challenged, and managers and employees understand the significance of this critically important, business-as-usual, function.

chapter |7 pages

Introduction

chapter |17 pages

Assessing Security Culture

chapter |40 pages

Case Studies

chapter |12 pages

Case Study 1: Olympic Delivery Authority

Raising the security culture bar for the Olympic and Paralympic Games in London 2012

chapter |3 pages

Case Study 2: A Large Company Supplying Vital Services

Engaging staff in security through improving communication

chapter |5 pages

Case Study 3: A Small Start-Up

Designing in security from the very start

chapter |3 pages

Case Study 4: A Government Organisation

Maintaining compliance with government security framework

chapter |5 pages

Case Study 5: Risk Management Culture

Developing a risk management culture of which security is a part

chapter |6 pages

Case Study 6: Learning the Hard Way

How an employee's actions led to a privacy breach and what this small healthcare organisation did about it