Developing and sustaining an effective security culture is an essential component of a protective security regime and helps mitigate against a range of threats that could cause physical, reputational or financial damage to organisations.
Security culture refers to the set of values, shared by everyone in an organisation, that determine how people are expected to think about and approach security. Getting security culture right will help develop a security conscious workforce, and promote the desired security behaviours you want from staff.
The benefits of an effective security culture include:
- A workforce that are more likely to be engaged with, and take responsibility for, security issues
- Increased compliance with protective security measures
- Reduced risk of insider incidents
- Awareness of the most relevant security threats
- Employees are more likely to think and act in a security conscious manner
Many organisations want to embed an effective security culture where security is a collective responsibility shared by everyone in an organisation.
NPSA provide a variety of materials to help organisations to assess their security culture, and direct and shape their own security culture initiatives.