Culture Matters—Put People at the Heart of Security
summary
Argues security must shift from tools to people, showing Forrester survey evidence that leaders spend most time on stakeholders not tech and that 2019 visibility woes fell from 51% to 19%. Identifies lack of organizational support as the top cause of toxicity from ~200 LinkedIn contributions, cites 53% of firms not addressing toxicity and 48% not funding healthy workspaces, and predicts a Global 500 CISO firing for toxic culture. Recommends stakeholder mapping, a four‑step human-centric security program (identify, target behaviours, design, measure), 10 design principles, gamified breach simulations and security champions networks to win hearts and minds.
AI-written summary · about
chapters (31)
- 0:00Introduction
- 1:05My Cultural Journey
- 1:28My Challenge
- 2:28Security Leaders
- 5:31Security is Emotional
- 6:06Human Interaction
- 6:45The Four Components of Culture
- 8:19Never Surprise Stakeholders
- 9:12Politics
- 10:34Tools
- 12:07Take Care
- 12:44Toxicity
- 15:49ValuesBased Decisions
- 17:22Toxicity Issues
- 17:57Are We Speaking Out
- 18:56What Do We Do
- 20:54Visibility and Influence
- 22:33Build a HumanCentric Security Program
- 23:12Focus on the Stakeholders
- 24:48Focus on the End Users
- 25:19Step Outside
- 27:37Examples
- 29:01Ringoli
- 29:51Share the Load
- 30:25Need Skills
- 31:01Leadership Skills
- 31:51Mental Health
- 33:08Empathy
- 33:24Mia
- 33:58Mias Skills
- 35:28Conclusion
related talks
33mDon't You Know That You're Toxic? Moving Towards Positive Security Practices w/in Your Organization
50mSecurity's Social Problem
44mUnlikely Allies: How HR Can Help Build A Security-First Culture
31mICS Security: Why People and Culture Matter Most
15mTelling Hard Truths to Impact Change in Cybersecurity
19mCybersecurity's Silent Crisis: Protecting the Human Element
43mShifting Organizational Culture through Cyber-Awareness
48mHow to build a security mindset