CHAPTER 2: THE ELEMENTS OF SECURITY CULTURE

 

We will look at the elements that together make security culture: technology, policies/rules and people/competence, and how they work together to form culture.

Social behaviour, ideas and customs are to a large degree based upon rules. Some rules are written into laws, regulations and standards. Other rules, most of them in fact, are unwritten and come in the form of ethics, moral codes and our mutual ideas of what is acceptable behaviour in the different groups we belong to.

In this chapter I refer to all rules, laws, regulations, ethics, moral codes and so on as policies. To make it absolutely clear: policies in this context is more than just written policies in your organisation. In this context, ...

Get Build a Security Culture now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.