Security Culture

Security Culture starts from the premise that, even with good technical tools and security processes, an organisation is still vulnerable without a strong culture and a resilient set of behaviours in relation to people risk. Hilary Walton combines her research and her unique work portfolio to provide proven security culture strategies with practica

Autorentext
Hilary Walton is an Organisational Psychologist and works for Airways, New Zealand's air navigation service provider, as their Resilience and Continuity Manager. She provides advice to ensure that critical business processes across the organisation are sufficiently resilient to continue operating effectively. This includes activities such as oversight of security, change management, business continuity planning, software assurance and safety change processes. She has also worked for the Olympic Delivery Authority (ODA) where she helped to implement culture change and had privacy and data protection responsibilities. Hilary formerly led a Security Culture project for a UK Government security authority before working for the Olympics. She is a Chartered and HPC registered senior Organisational Psychologist with consulting experience in both the United Kingdom and Australasia. She has worked within both private and public organisational settings, ranging from the Royal New Zealand Air Force through to large government clients and telecom organisations.

Inhalt
Chapter 1 Introduction; Chapter 2 What Is Security Culture and People Risk? Why Are They Important?; Chapter 3 Building the Business Case for Security Culture and People Risk Management: Getting Senior Level Buy-in and Commitment; Chapter 4 Assessing Security Culture; Chapter 5 How to Improve Security Culture: Intervention Toolkit; Chapter 6 How to Prioritise What to Do Next; Chapter 7 Metrics: Measuring the Impact on the Organisation; Chapter 8 Case Studies; cs1 Case Study 1: Olympic Delivery Authority; cs2 Case Study 2: A Large Company Supplying Vital Services; cs3 Case Study 3: A Small Start-Up; cs4 Case Study 4: A Government Organisation; cs5 Case Study 5: Risk Management Culture; cs6 Case Study 6: Learning the Hard Way;