Curriculum > Information Security & GDPR > Organisation Security > IS125

Encouraging a Secure Culture

Source: Centre for the Protection of National Infrastructure (CPNI)

Tutorial Content

At a Glance

  • Behavioural Change
  • Individual Responsibility
  • Consistency

The culture within your organisation is defined by the ideas, customs, and social behaviour of its people, and broadly determines how people approach security. Promoting a secure culture, means that secure behaviour is not simply single events, but a consistent and persistent approach to protecting an organisation’s information.

“Simply knowing how to act securely is not enough. How you act in implementing these secure behaviours affects those around you.”

- Hut Six, Encouraging a Secure Culture

Learning Objectives

  • Putting Knowledge into Practice
  • Promoting a Secure Culture
  • Upholding Information Security
  • Completion time: ~ 8 minutes