From awareness to behaviour change: The micro-foundations of cybersecurity culture
People, culture, and behaviour remain the core risk in cyber security assessments and post-incident analyses. How well do we treat the risk of human behaviour in cyber security?
From compliance to resilience: people, culture and information security
The human is both an asset and a liability in information security. Our information security culture often views humans with deep suspicion. How can we move security from compliance to resilience?