Developing cybersecurity culture to influence employee behavior: A practice perspective. Issue 98 (November 2020)

• Record Type: Journal Article
• Authors: Alshaikh, Moneer
• Is Part Of: Computers & security. Issue 98(2020)
• Publication Date: 2020-11
• Subjects: Cybersecurity culture -- Behavior change -- Cyber security awareness -- Information security management -- Cybersecurity initiatives -- Cybersecurity champion network -- Cybersecurity hub; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2020.102003
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: This paper identifies and explains five key initiatives that three Australian organizations have implemented to improve their respective cyber security cultures. The five key initiatives are: identifying key cyber security behaviors, establishing a 'cyber security champion' network, developing a brand for the cyber team, building a cyber security hub, and aligning security awareness activities with internal and external campaigns. These key initiatives have helped organizations exceed minimal standards-compliance to create functional cyber security cultures. This paper discusses why these initiatives have been effective and provides practical guidance on their integration into organizational security program