Deep Culture Assessment Case Study
Problem: An energy sector client with a global footprint was experiencing challenges with information security compliance in offices located in Africa and South America.
Solution Applied: Every culture has their own trigger points for stirring behaviour. And many of them may seem “illogical” especially to those looking into a culture’s behaviour from the outside. But there are ways to both understand what key cultural mechanisms are driving behaviour are in the countries where your company operates. And that understanding can and should be the basis for aligning security awareness programmes and governance roll out efforts to cultural mechanisms that will amplify, not undermine, the ability to achieve consistent, sustainable compliance.
Our Deep Culture Assessment framework identified and measured the key cultural values and triggers underpinning decisions not to comply across the global enterprise. Working with local champions in key offices we reshaped the governance structure and outreach materials to work with, not against, those key cultural and behavioural drivers.
This in turn led to less noise and thus more clarity when trying to differentiate between unintended and malicious insider threat risks.
Result: The company was able to realise dramatic improvements in resistance to social engineering-oriented penetration exercises and in the feedback on the quality and applicability of the governance roll out programme overall.
Contact us via the form on this page to get started with your company's Deep Cultural Assessment.
To read more about our work regarding the relationship of deep culture and compliance, click here.
