eBooks/eGuides

The 7 Dimensions of Security Culture

Issue link: https://insights.oneneck.com/i/1476862

Contents of this Issue

Navigation

Page 25 of 43

26 The 7 dimensions of security culture submit different feedback and requirements to the management. Motivation plays a vital role in the discovery of the needs and aspirations of staff by managers. Proper communication is an efficacious and proficient means to foster good human relationship with individuals (and the general public) and for keeping an organization proactive, in order to comfortably handle daunting challenges. Other benefits of effective communication skills in building security culture are that communication acts as a source of information and helps in the decision-making process and helps in identifying the alternative course of action. As stated earlier, communication helps in building people's attitude. A well-informed person will always have better attitude than a less informed person. Different forms of communication like handbooks, newsletters and meetings will help the employees to form different attitudes. Communication also helps in the controlling process of management. It allows the managers to know about employees' grievances and helps the employees to know about the policies of the organization. Effective communication is a necessary requisite for successful collaboration between departments and business units. A collaborative effort is needed to build an effective security culture and is a fundamental part of the Security Culture Framework (SCF). In particular, its Organization module (step two of the framework) requires that a security culture program "involve the right people and define target audiences" 61 . The SCF explains that the "right people" can be found from throughout the organization, in almost any department, at every level. Every successful security culture program needs to achieve executive buy-in and management commitment from the top down. In order to attain this, the core team (the main people who are going to design and implement your security culture program) will benefit greatly from multi-functional expertise. In addition to security expertise, for example, competences from marketing, communications and HR will be invaluable, as these roles require highly-developed communication channels with other stakeholders, including employees from across the organization. The "right people" can also be found in the form of potential security champions or ambassadors. Again, these people are not necessarily found inside the security or IT teams and can be found can be found from just about anywhere. Mapping the security culture of the organization against the organizational structure is one way to uncover potential security culture ambassadors.

Articles in this issue

Archives of this issue

view archives of eBooks/eGuides - The 7 Dimensions of Security Culture