Security Culture and Behaviour Change
A good security culture in your organisation is an essential component of a protective security regime and helps to mitigate against insider threats and external people threats (such as hostile reconnaissance).
Security culture is the set of values, shared by everyone in an organisation, which determine how people are expected to think about and approach security, and is essential to an effective personnel and people security regime.
The benefits of an effective security culture include:
- employees are engaged with, and take responsibility for, security issues
- levels of compliance with protective security measures increase
- the risk of security incidents and breaches is reduced by encouraging employees to think and act in more security conscious ways
- employees are more likely to report behaviours/activities of concern
Visit the Optimising People in Security page to find out more about CPNI’s programme to help organisations get the most out of their staff, dedicated security officers, contractors, and visitors to help reduce vulnerability from insider and external attacks.