How to build and maintain security culture in any organization

3,571 views
3,073 views

Published on

This is the slides from a presentation I gave at the ISACA Nordic Conference in Oslo 2014, where I discuss what culture is, why it is important, and propose one way to build and maintain security culture by using the Security Culture Framework. You can read the transcript at my blog: http://roer.com/2014/04/08/build-maintain-security-culture/ which will help you make more sense of the slides!

Published in: Leadership & Management

How to build and maintain security culture in any organization

  1. SECURITY CULTURE by Kai Roer ISACA Nordic Conference, Oslo, 2014
  2. SECURITY CULTURE Say what…?
  3. WHAT IS CULTURE? the ideas, customs, and social behavior of a particular people or society Ref: Oxford Dictionary
  4. WHAT IS SECURITY? • the state of being free from danger or threat • the state of feeling safe, stable, and free from fear or anxiety Ref: Oxford Dictionary
  5. SECURITY CULTURE the ideas, customs, and social behavior of a particular people or society, that helps them being free from danger or threat Ref: K. Roer
  6. CREATING a Security Culture Program
  7. INTRODUCING: 
 THE SECURITY CULTURE FRAMEWORK
  8. WHERETO START 1. Set up your team 2. Define your goals, and how to know you reach them (To-Be) 3. Measure your current status (As-Is) 4. Define target audience(s) 5. Choose relevant topic(s) and activities 6. Plan and execute 7. Measure and Revise 8. Restart
  9. WHY A PROGRAM • Culture is constantly evolving • Organizations change • People change • Not one training to save them all!
  10. MORETHANTRAINING • Security Culture must be nurtured • Support business • Create understanding && Awareness • On-going • One step at the time
  11. THANKS, ISACA 2014! • http://theroergroup.com • http://roer.com • https://scf.roer.com • @kairoer
  12. SOURCES OF INFORMATION • The Security Culture Framework project • Research • SANS • The Analogies Project • The Security Awareness Framework project

×