CHAPTER

7

Creating Culture Maps with the Security Culture Diagnostic Survey

The Security Culture Diagnostic Survey (SCDS) described in Chapter 6 enables an organization to define and measure its information security culture by having respondents assign scores to specific values, assumptions, and norms that align with the four general security culture types of the Competing Security Cultures Framework. The inherently visual nature of the CSCF, with its quadrants and competing value axes, also enables and encourages users of the SCDS to visualize the insights that the SCDS scores provide. The resulting graphical representation makes the insights regarding cultural conflicts and interrelationships generated by the SCDS more intuitive and powerful ...

Get People-Centric Security: Transforming Your Enterprise Security Culture now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.