Culture Runs Deep
It’s far more difficult to influence a person’s intrinsic sense of right and wrong by organisational governance if elements of that governance conflict with the basic cultural values instilled during childhood. And what's more, effective cyber security isn’t only about behaviour in the office any more. In our always-on, everything-connected world, what your staff do at home and online in their personal time, dramatically impacts the susceptibility of your organisation.
And this leaves cyber security leadership in a bind. How do you create a culture of information security amongst your staff that not only influences behaviour in the office, but everywhere else too? I think most people would agree that extending the scope and detail of organisational governance to dictate behaviour 24x7x365 for all their employees everywhere is not reasonable, nor would it be received favourably if it were even legal.
The Solution
Our Deep Culture Assessment programme is founded on decades of research into the relationship of organisational culture and deeper, national and ethnic cultures when it comes to leadership, learning and compliance. We have brought our own insights from our 20 years experience working in cyber security to create a programme of remediation targeting an alignment between governance, security awareness content and deep cultural values and sub-cultures present in your organisation.