{"product_id":"the-security-culture-playbook-an-executive-guide-to-reducing-risk-and-developing-your-human-defense-layer-hardback-9781119875239","title":"The Security Culture Playbook; An Executive Guide To Reducing Risk and Developing Your Human Defense Layer (Hardback) 9781119875239","description":"\u003cfont face=\"Georgia\"\u003e\r\n\u003cp\u003e\u003cfont size=\"6\"\u003eThe Security Culture Playbook\u003c\/font\u003e\u003cbr\u003e\r\n\u003cfont size=\"5\"\u003eAn Executive Guide To Reducing Risk and Developing Your Human Defense Layer\u003c\/font\u003e\u003c\/p\u003e\r\n\r\n\r\n\r\n\r\n\u003cp\u003e\u003cfont size=\"4\"\u003ePerry Carpenter (Author), Kai Roer (Author)\u003c\/font\u003e\u003c\/p\u003e\r\n\r\n\u003cp\u003e\u003cfont size=\"3\"\u003e9781119875239, Wiley\u003c\/font\u003e\u003c\/p\u003e\r\n\r\n\u003cp\u003e\u003cfont size=\"3\"\u003eHardback, published 18 April 2022\u003c\/font\u003e\u003c\/p\u003e\r\n\r\n\u003cp\u003e\u003cfont size=\"3\"\u003e256 pages\u003cbr\u003e23.1 x 16 x 2.5 cm, 0.454 kg\u003c\/font\u003e\u003c\/p\u003e\r\n\r\n\r\n\r\n\r\n\r\n\u003cp align=\"justify\"\u003e\u003cstrong\u003e\u003cfont size=\"3\"\u003e\u003cp\u003e\u003cb\u003eMitigate human risk and bake security into your organization’s culture from top to bottom with insights from leading experts in security awareness, behavior, and culture.\u003c\/b\u003e \u003c\/p\u003e\n\u003cp\u003eThe topic of security culture is mysterious and confusing to most leaders. But it doesn’t have to be. In \u003ci\u003eThe Security Culture Playbook\u003c\/i\u003e, Perry Carpenter and Kai Roer, two veteran cybersecurity strategists deliver experience-driven, actionable insights into how to transform your organization’s security culture and reduce human risk at every level. This book exposes the gaps between how organizations have traditionally approached human risk and it provides security and business executives with the necessary information and tools needed to understand, measure, and improve facets of security culture across the organization. \u003c\/p\u003e\n\u003cp\u003eThe book offers: \u003c\/p\u003e\n\u003cul\u003e \u003cli\u003eAn expose of what security culture \u003ci\u003ereally\u003c\/i\u003e is and how it can be measured\u003c\/li\u003e \u003cli\u003eA careful exploration of the 7 dimensions that comprise security culture\u003c\/li\u003e \u003cli\u003ePractical tools for managing your security culture program, such as the Security Culture Framework and the Security Culture Maturity Model\u003c\/li\u003e \u003cli\u003eInsights into building support within the executive team and Board of Directors for your culture management program\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eAlso including several revealing interviews from security culture thought leaders in a variety of industries, \u003ci\u003eThe Security Culture Playbook\u003c\/i\u003e is an essential resource for cybersecurity professionals, risk and compliance managers, executives, board members, and other business leaders seeking to proactively manage and reduce risk.\u003c\/p\u003e\u003c\/font\u003e\u003c\/strong\u003e\u003c\/p\u003e\r\n\r\n\u003cp\u003e\u003cfont size=\"3\"\u003e\u003cp\u003eAbout the Authors viii\u003c\/p\u003e \u003cp\u003eAcknowledgments xii\u003c\/p\u003e \u003cp\u003eIntroduction xxv\u003c\/p\u003e \u003cp\u003e\u003cb\u003ePart I: Foundation 1\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 1: You Are \u003ci\u003eHere \u003c\/i\u003e3\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eWhy All the Buzz? 4\u003c\/p\u003e \u003cp\u003eWhat Is Security Culture, Anyway? 8\u003c\/p\u003e \u003cp\u003eA Problem of Definition 9\u003c\/p\u003e \u003cp\u003eA Problem of Overconfidence 11\u003c\/p\u003e \u003cp\u003eTakeaways 12\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 2: Up-leveling the Conversation: Security Culture Is a Board-level Concern 13\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eA View from the Top 14\u003c\/p\u003e \u003cp\u003eTelling the Human Side of the Story 15\u003c\/p\u003e \u003cp\u003eWhat’s the Cost of \u003ci\u003eNot \u003c\/i\u003eGetting This Right? 16\u003c\/p\u003e \u003cp\u003eCybercriminals Are Doubling Down on Their Attacks Against Your Employees 19\u003c\/p\u003e \u003cp\u003eYour People and Security Culture Are at the Center of Everything 20\u003c\/p\u003e \u003cp\u003eThe Implication 22\u003c\/p\u003e \u003cp\u003eGetting It Right 24\u003c\/p\u003e \u003cp\u003eTakeaways 25\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 3: The Foundations of Transformation 27\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eThe Core Thesis 29\u003c\/p\u003e \u003cp\u003eThe Knowledge-Intention-Behavior Gap 29\u003c\/p\u003e \u003cp\u003eThree Realities of Security Awareness 31\u003c\/p\u003e \u003cp\u003eProgram Focus 31\u003c\/p\u003e \u003cp\u003eExtending the Discussion 33\u003c\/p\u003e \u003cp\u003eIntroducing the Security Culture Maturity Model 33\u003c\/p\u003e \u003cp\u003eThe Security Culture Maturity Model in Brief 35\u003c\/p\u003e \u003cp\u003eThe S-Curves 36\u003c\/p\u003e \u003cp\u003eThe Value of the Security Culture Maturity Model 37\u003c\/p\u003e \u003cp\u003eYou Are Always Either Building Strength or Allowing Atrophy 37\u003c\/p\u003e \u003cp\u003eTakeaways 38\u003c\/p\u003e \u003cp\u003e\u003cb\u003ePart II: Exploration 39\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 4: Just What Is Security Culture, Anyway? 41\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eLessons from Safety Culture 42\u003c\/p\u003e \u003cp\u003eA Jumble of Terms 44\u003c\/p\u003e \u003cp\u003eInformation Security Culture 45\u003c\/p\u003e \u003cp\u003eIT Security Culture 45\u003c\/p\u003e \u003cp\u003eCybersecurity Culture 46\u003c\/p\u003e \u003cp\u003eSecurity Culture in the Modern Day 46\u003c\/p\u003e \u003cp\u003eTechnology Focus 47\u003c\/p\u003e \u003cp\u003eCompliance Focus 48\u003c\/p\u003e \u003cp\u003eHuman-Reality Focus 49\u003c\/p\u003e \u003cp\u003eTakeaways 51\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 5: Critical Concepts from the Social Sciences 53\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eWhat’s the Real Goal—Awareness, Behavior, or Culture? 54\u003c\/p\u003e \u003cp\u003eComing to Terms with Our Irrational Nature 55\u003c\/p\u003e \u003cp\u003eWe Are Lazy 56\u003c\/p\u003e \u003cp\u003eWhy Don’t We Just Give Up? 60\u003c\/p\u003e \u003cp\u003eSecurity Culture—A Part of Organizational Culture 61\u003c\/p\u003e \u003cp\u003eTakeaways 62\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 6: The Components of Security Culture 63\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eA Problem of Definition 64\u003c\/p\u003e \u003cp\u003eThe Academic Perspective 64\u003c\/p\u003e \u003cp\u003eThe Practitioner Perspective 65\u003c\/p\u003e \u003cp\u003eDefining Security Culture 66\u003c\/p\u003e \u003cp\u003eSecurity Culture as Dimensions 67\u003c\/p\u003e \u003cp\u003eThe Seven Dimensions of Security Culture 69\u003c\/p\u003e \u003cp\u003eAttitudes 69\u003c\/p\u003e \u003cp\u003eBehaviors 69\u003c\/p\u003e \u003cp\u003eCognition 69\u003c\/p\u003e \u003cp\u003eCommunication 70\u003c\/p\u003e \u003cp\u003eCompliance 70\u003c\/p\u003e \u003cp\u003eNorms 70\u003c\/p\u003e \u003cp\u003eResponsibilities 71\u003c\/p\u003e \u003cp\u003eThe Security Culture Survey 71\u003c\/p\u003e \u003cp\u003eExample Findings from Measuring the Seven Dimensions 72\u003c\/p\u003e \u003cp\u003eNormalized Use of Unauthorized Services 73\u003c\/p\u003e \u003cp\u003eConfidentiality and Insider Threats 74\u003c\/p\u003e \u003cp\u003eLast Thought 74\u003c\/p\u003e \u003cp\u003eTakeaways 75\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 7: Interviews with Organizational Culture Experts and Academics 77\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eJohn R. Childress, PYXIS Culture Technologies Limited 78\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 78\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 79\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 79\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 80\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share Related to Culture Change? 81\u003c\/p\u003e \u003cp\u003eHow Does a Culture Evolve (or How Often?) 82\u003c\/p\u003e \u003cp\u003eProfessor John McAlaney, Bournemouth University, UK 82\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 83\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 83\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 83\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 84\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share Related to Culture Change? 85\u003c\/p\u003e \u003cp\u003eHow Does a Culture Evolve (or How Often?) 85\u003c\/p\u003e \u003cp\u003eDejun “Tony” Kong, PhD, Muma College of Business, University of South Florida 86\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 86\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 86\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 87\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 87\u003c\/p\u003e \u003cp\u003eMichael Leckie, Silverback Partners, LLC 87\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 88\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 89\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 90\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 90\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 91\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share Related to Culture Change? 93\u003c\/p\u003e \u003cp\u003eHow Does a Culture Evolve (or How Often?) 93\u003c\/p\u003e \u003cp\u003e\u003cb\u003ePart III: Transformation 95\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 8: Introducing the Security Culture Framework 97\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eThe Power of Three 99\u003c\/p\u003e \u003cp\u003eStep 1: Measure 100\u003c\/p\u003e \u003cp\u003eKnow Where You are 101\u003c\/p\u003e \u003cp\u003eDecide Where You Want to Be 102\u003c\/p\u003e \u003cp\u003eFind Your Gap 104\u003c\/p\u003e \u003cp\u003eStep 2: Involve 106\u003c\/p\u003e \u003cp\u003eBuilding Support 106\u003c\/p\u003e \u003cp\u003eDifferent Audiences 108\u003c\/p\u003e \u003cp\u003eStep 3: Engage 109\u003c\/p\u003e \u003cp\u003eRinse and Repeat 111\u003c\/p\u003e \u003cp\u003eBenefits of Using the Security Culture Framework 111\u003c\/p\u003e \u003cp\u003eTakeaways 112\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 9: The Secrets to Measuring Security Culture 113\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eConnecting Awareness, Behavior, and Culture 115\u003c\/p\u003e \u003cp\u003eHow Can You Measure the Unseen? 116\u003c\/p\u003e \u003cp\u003eUsing Existing Data 116\u003c\/p\u003e \u003cp\u003eThe Right Way to Use Data 119\u003c\/p\u003e \u003cp\u003eMethods of Measuring Culture 119\u003c\/p\u003e \u003cp\u003eObservation 120\u003c\/p\u003e \u003cp\u003eExperimentation 121\u003c\/p\u003e \u003cp\u003eInterrogation (Surveys and Interviews) 121\u003c\/p\u003e \u003cp\u003eA\/B Testing 122\u003c\/p\u003e \u003cp\u003eMultiple Metrics, Single Score 124\u003c\/p\u003e \u003cp\u003eTrends 125\u003c\/p\u003e \u003cp\u003eA Note Regarding Completion Rates 127\u003c\/p\u003e \u003cp\u003eTakeaways 128\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 10: How to Influence Culture 129\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eResistance to Change 130\u003c\/p\u003e \u003cp\u003eBe Proactive 131\u003c\/p\u003e \u003cp\u003eThe Complexity of Culture 133\u003c\/p\u003e \u003cp\u003eUsing the Seven Dimensions to Influence Your Security Culture 134\u003c\/p\u003e \u003cp\u003eAttitudes 134\u003c\/p\u003e \u003cp\u003eBehaviors 136\u003c\/p\u003e \u003cp\u003eCognition 138\u003c\/p\u003e \u003cp\u003eCommunication 140\u003c\/p\u003e \u003cp\u003eCompliance 141\u003c\/p\u003e \u003cp\u003eNorms 143\u003c\/p\u003e \u003cp\u003eResponsibilities 144\u003c\/p\u003e \u003cp\u003eHow Do You Know Which Dimension to Target? 146\u003c\/p\u003e \u003cp\u003eTakeaways 147\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 11: Culture Sticking Points 149\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eDoes Culture Change Have to Be Difficult? 150\u003c\/p\u003e \u003cp\u003eUsing Norms Is a Double-Edged Sword 151\u003c\/p\u003e \u003cp\u003eFailing to Plan Is Planning to Fail 152\u003c\/p\u003e \u003cp\u003eIf You Try to Work Against Human Nature, You Will Fail 153\u003c\/p\u003e \u003cp\u003eNot Seeing the Culture You Are Embedded In 155\u003c\/p\u003e \u003cp\u003eTakeaways 156\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 12: Planning and Maturing Your Program 157\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eTaking Stock of What We’ve Covered 158\u003c\/p\u003e \u003cp\u003eView Your Culture Through Your Employees’ Eyes 159\u003c\/p\u003e \u003cp\u003eCulture Carriers 160\u003c\/p\u003e \u003cp\u003eBuilding and Modeling Maturity 161\u003c\/p\u003e \u003cp\u003eExploring the Data 162\u003c\/p\u003e \u003cp\u003eCulture Maturity Indicators 162\u003c\/p\u003e \u003cp\u003eLevel 1: Basic Compliance 165\u003c\/p\u003e \u003cp\u003eLevel 2: Security Awareness Foundation 165\u003c\/p\u003e \u003cp\u003eLevel 3: Programmatic Security Awareness \u0026amp; Behavior 166\u003c\/p\u003e \u003cp\u003eLevel 4: Security Behavior Management 167\u003c\/p\u003e \u003cp\u003eLevel 5: Sustainable Security Culture 168\u003c\/p\u003e \u003cp\u003eThere Are Stories in the Data 170\u003c\/p\u003e \u003cp\u003eA Seat at the Table 174\u003c\/p\u003e \u003cp\u003eTakeaways 175\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 13: Quick Tips for Gaining and Maintaining Support 177\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eYou Are a Guide 178\u003c\/p\u003e \u003cp\u003eSell by Using Stories 179\u003c\/p\u003e \u003cp\u003eLead with Empathy, Know Your Audience 180\u003c\/p\u003e \u003cp\u003eSet Expectations 184\u003c\/p\u003e \u003cp\u003eTakeaways 185\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 14: Interviews with Security Culture Thought Leaders 187\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eAlexandra Panaretos, Ernst \u0026amp; Young 188\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 188\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 189\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share Related to Culture Change? 190\u003c\/p\u003e \u003cp\u003eDr. Jessica Barker, Cygenta 193\u003c\/p\u003e \u003cp\u003eWhy Is Security Culture Important? 193\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 194\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 194\u003c\/p\u003e \u003cp\u003eWhat Is Your Most Interesting Experience with Culture? 195\u003c\/p\u003e \u003cp\u003eKathryn Tyrpak, Jaguar Land Rover 195\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 195\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 196\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 196\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 196\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 197\u003c\/p\u003e \u003cp\u003eLauren Zink, Boeing 197\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 198\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 198\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 199\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 199\u003c\/p\u003e \u003cp\u003eMark Majewski, Rock Central 200\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 200\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 200\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 201\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 201\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 201\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share Related to Culture Change? 202\u003c\/p\u003e \u003cp\u003eHow Does a Culture Evolve (or How Often?) 202\u003c\/p\u003e \u003cp\u003eMo Amin, moamin.com 203\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 203\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 203\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 203\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 203\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 204\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share\u003c\/p\u003e \u003cp\u003eRelated to Culture Change? 204\u003c\/p\u003e \u003cp\u003eHow Does a Culture Evolve (or How Often)? 205\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 15: Parting Thoughts 207\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eEngage the Community 208\u003c\/p\u003e \u003cp\u003eBe a Lifelong Learner 209\u003c\/p\u003e \u003cp\u003eBe a Realistic Optimist 210\u003c\/p\u003e \u003cp\u003eConclusion 211\u003c\/p\u003e \u003cp\u003eBibliography 213\u003c\/p\u003e \u003cp\u003eIndex 217\u003c\/p\u003e\u003c\/font\u003e\u003c\/p\u003e\r\n\r\n\u003cp\u003e\u003cfont size=\"3\"\u003eSubject Areas: Computer networking \u0026amp; communications [\u003ca title=\"See our other books on Computer networking \u0026amp; communications\" href=\"https:\/\/freshlyprintedbooks.co.uk\/search?q=%22Computer%20networking%20\u0026amp;%20communications%20%5BUT%5D%22\"\u003eUT\u003c\/a\u003e]\u003c\/font\u003e\u003c\/p\u003e\r\n\r\n\r\n\u003c\/font\u003e","brand":"Wiley","offers":[{"title":"Brand New","offer_id":52656052142360,"sku":"9781119875239","price":15.49,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0730\/2037\/5320\/files\/9781119875239.jpg?v=1789172467","url":"https:\/\/freshlyprintedbooks.co.uk\/products\/the-security-culture-playbook-an-executive-guide-to-reducing-risk-and-developing-your-human-defense-layer-hardback-9781119875239","provider":"Freshly Printed Books","version":"1.0","type":"link"}