This is the slides from a presentation I gave at the ISACA Nordic Conference in Oslo 2014, where I discuss what culture is, why it is important, and propose one way to build and maintain security culture by using the Security Culture Framework. You can read the transcript at my blog: http://roer.com/2014/04/08/build-maintain-security-culture/ which will help you make more sense of the slides!