Building Security Culture for Leaders
Culture is the part of a security programme that no control fixes. This four week course is for leaders who need people to make better decisions when nobody is watching, and who are tired of posters.
You will measure your current culture, choose one behaviour worth shifting, design the change, and build the executive engagement that keeps it going after the launch email.
- Duration
- 4 weeks
- Format
- Live online, instructor-led
- Prerequisites
- None required
- Class size
- Capped at 12 learners
What you will be able to do
- Describe your current security culture with evidence rather than impressions
- Choose one behaviour to shift and state what success would look like
- Apply a change management model to a security initiative
- Identify where policy and process are pushing people toward insecure workarounds
- Turn an incident into a story people repeat without naming or blaming anyone
- Build an executive engagement rhythm that outlasts the initial announcement
- Recognize when culture work is the wrong answer and a control is the right one
Course outline
5 modules
- Culture, climate and compliance as separate things
- Why culture work fails when the process is the real problem
- Subcultures: engineering, finance, field staff and the executive floor
- Diagnosing whether you have a knowledge, motivation or friction problem
- Setting a scope you can influence within a year
What you need before you start
- A leadership, management or programme role with influence over people
- Access to an organization or team you can assess and plan against
- Willingness to share an honest assessment result with the class
- Roughly three hours a week outside sessions
Who this course is for
- Security leaders responsible for how their organization behaves
- IT and engineering managers who need better security habits in their teams
- Human resources, communications and change professionals supporting security
- Executives sponsoring a security transformation
- Consultants advising on culture and behaviour change
Questions about this course
More in security leadership and governance
Entry-levelCIS Controls Implementation Group 1
A four week, step-by-step route through the CIS Controls at Implementation Group 1: basic cyber hygiene you can actually complete with a small team.
4 weeks · live online
Contact for pricingView outline
Entry-levelBusiness Finance for Security Leaders
Four weeks of business finance for security leaders: read the statements, build a budget, split capital from operating cost and make the case finance will back.
4 weeks · live online
Contact for pricingView outline
CorePerforming a Cyber Security Risk Assessment
A six week, hands-on method for cyber security risk assessment: scope the work, test controls, score risk defensibly and write findings people act on.
6 weeks · live online
Contact for pricingView outline
Ready to launch your cyber security career?
Join the next live online cohort. No experience required, just bring the curiosity.