Security Culture

The ideas, customs, and social behavior of a particular people or society
that allows them to be free from danger or threats.

The Framework: Metrics

The starting point in the Security Culture Framework is metrics. In this phase, you understand your current posture and where you want to get to. Metrics are based on facts and measurable information. You use the measurements to analyse your organization’s strengths, weakness’ and possibilities. You start out by defining the current sitiuation, known as As-Is. Next, you document your target situation, known…

More about Metrics

How do you define your goals?

Know your goal Your security culture program success is a direct result of your direction and your goals. How do you define your goals? With the SCF module Metrics, you set goals, define your baseline and decide how to measure security culture in your organization/program. Read more on the Metrics module: https://securitycultureframework.net/category/framework/metrics/

What are your goals?

Measure your success: Define clear goals using the SMART makes it easy to know if you fail or succeed. What are your goals? With the SCF module Metrics, you set goals, define your baseline and decide how to measure security culture in your organization/program. Read more on the Metrics module: https://securitycultureframework.net/category/framework/metrics/

Metrics, a technical drill down

We all see that the goal is one of the most important parts in a journey, but without a clear understanding on where we are at the moment it is hard to know how long the journey will take and even in what direction the journey should start. In the security culture framework we do take care of ensuring that…

The art of a good password – what is it, really?

Myp0ppy vs. UX*7(æ#6VbuiRomeo_and-Juliet8loVe4Ø&% You may wonder whether the blog author has lost his mind using a subtitle as the one above. Is he writing a piece about a battle of intergalactic entities, or if the topic is about a fight between a dog and a machine? Way off (one may of course argue the former)! My topic this time is about passwords and password…

What goals do you have?

Build culture with goals: Set the goals of your security culture program early, and use them to direct your actions. What goals do you have? With the SCF module Metrics, you set goals, define your baseline and decide how to measure security culture in your organization/program. Read more on the Metrics module: https://securitycultureframework.net/category/framework/metrics/

How do you measure culture?

Metrics Matter: Knowing how to measure your progress and results, is key to your security awareness program. How do you measure culture? With the SCF module Metrics, you set goals, define your baseline and decide how to measure security culture in your organization/program. Read more on the Metrics module: https://securitycultureframework.net/category/framework/metrics/

Security Awareness Cycle by Tom Mannerud

The Security Awareness Cycle – a supplement to the SCF!

Creating awareness and security culture requires a lot of hard work if you want to succeed. Using the Security Culture Framework, you can design and implement the security culture you want, which is great. The SCF itself offers an over-arching framework within which you can build and maintain your culture – but sometimes you want a more hands-on approach, a…

Promoting an Information Security Culture

Shan Lee of JustEat presenting how to promote a security culture at the Infosecwebinars today. The recorded webcast is available here: A direct link to the webcast page: https://www.brighttalk.com/webcast/288/161635 Shan is using his great humor to convey the message, and it is not dull!

Number 10th Anniversary of the [Security Culture Show #10]

Last year, when Mo and I created the Security Culture Show (podcast, vcast, hangout, whatever you prefer calling it), we had no idea of the level of success we would get. Today marks the tenth show, and we will celebrate a little. Or a lot, depending on what happens, I guess! What I do know, is that the show will…

Discuss and learn