Creating the right organisational culture for cyber security www.ncsc.gov.uk/blog-post…

Today we are launching our Cyber security culture principles. They were developed as a result of extensive research by the NCSC, and our industry and government partners. The principles describe cultural conditions that are essential underpinnings for an organisation to be cyber secure and offer an approach to developing that culture.

But helping organisations achieve a culture that supports good cyber security will take far more than NCSC guidance. It needs:

• cyber security professionals to bring in new expertise
• culture specialists to introduce new tools and ways of assessing culture
• organisational leaders to commit to this change from the top down

This is where you – as cyber security professionals, culture specialists and leaders – come in.