Awareness module on security culture

Culture may be an unusual topic for security awareness and training but this is an extremely important issue. An organisation's information security status is bound to be stronger if workers generally are aware of, and fulfil their obligations towards, security, privacy, compliance, confirmity and so on. If you reach the point where behaving securely is simply "how we do things here", you are on to a winner! Culture is a hand-waving yet powerful factor in information security just as our national cultures affect the way we think and act. Culture is also dynamic: major events (such as terrorism and major security incidents) can dramatically affect attitudes across broad swathes of people – sharp cultural shifts that change our perceptions, decisions, priorities and activities - for a while at least. We can't honestly claim to achieve miracles but this module takes a big step in the right direction. The awareness and training materials inform and persuade workers (staff, mana...