Getting security culture right is a vital aspect of an organisation's protective security regime. There are a number of reasons why organisations might need to assess their security culture; to see what is going well and where improvements could be made, to direct and shape future initiatives or understand the source of problems they are already aware of. To support national infrastructure organisations in doing this, NPSA has created the SeCuRE 4 security culture assessment tool.
SeCuRE 4 is a suite of self-assessment survey tools developed by NPSA over years of research and development, conducted in collaboration with our academic partners to ensure a theoretically driven approach to assessing security culture. Secure 4 has been designed to provide new capability for assessing different aspects of security culture. The outputs from the surveys can now be used to:
- Shed light on current and desired strategic approaches to security present in your organisation
- Measure employee's perceptions of how well security is working, and highlight where improvements in security culture are required
- Assess employees understanding of the relevant threats, their security responsibilities and their motivations to be security conscious
- Understand how frequently employees are performing specific security behaviours and what might encourage them to do them more often
