The Security Culture Framework consists of four modules: Metrics: What to measure, why and how Organization: Whom to involve Topics: What topics to cover Planner: When do we do the different activities The Framework request you to start at the top, and work your way towards the bottom. Or, if using the illustration, start in the top-right corner, and work…