People-Centric Security: Transforming Your Enterprise Security Culture


Book Description

A culture hacking how to complete with strategies, techniques, and resources for securing the most volatile element of information security—humans People-Centric Security: Transforming Your Enterprise Security Culture addresses the urgent need for change at the intersection of people and security. Esentially a complete security culture toolkit, this comprehensive resource provides you with a blueprint for assessing, designing, building, and maintaining human firewalls. Globally recognized information security expert Lance Hayden lays out a course of action for drastically improving organizations’ security cultures through the precise use of mapping, survey, and analysis. You’ll discover applied techniques for embedding strong security practices into the daily routines of IT users and learn how to implement a practical, executable, and measurable program for human security. Features downloadable mapping and surveying templates Case studies throughout showcase the methods explained in the book Valuable appendices detail security tools and cultural threat and risk modeling Written by an experienced author and former CIA human intelligence officer




Transformational Security Awareness


Book Description

Expert guidance on the art and science of driving secure behaviors Transformational Security Awareness empowers security leaders with the information and resources they need to assemble and deliver effective world-class security awareness programs that drive secure behaviors and culture change. When all other processes, controls, and technologies fail, humans are your last line of defense. But, how can you prepare them? Frustrated with ineffective training paradigms, most security leaders know that there must be a better way. A way that engages users, shapes behaviors, and fosters an organizational culture that encourages and reinforces security-related values. The good news is that there is hope. That’s what Transformational Security Awareness is all about. Author Perry Carpenter weaves together insights and best practices from experts in communication, persuasion, psychology, behavioral economics, organizational culture management, employee engagement, and storytelling to create a multidisciplinary masterpiece that transcends traditional security education and sets you on the path to make a lasting impact in your organization. Find out what you need to know about marketing, communication, behavior science, and culture management Overcome the knowledge-intention-behavior gap Optimize your program to work with the realities of human nature Use simulations, games, surveys, and leverage new trends like escape rooms to teach security awareness Put effective training together into a well-crafted campaign with ambassadors Understand the keys to sustained success and ongoing culture change Measure your success and establish continuous improvements Do you care more about what your employees know or what they do? It's time to transform the way we think about security awareness. If your organization is stuck in a security awareness rut, using the same ineffective strategies, materials, and information that might check a compliance box but still leaves your organization wide open to phishing, social engineering, and security-related employee mistakes and oversights, then you NEED this book.




People Strategy


Book Description

The Wall Street Journal bestseller! Learn to unlock the potential of your employees and colleagues with this definitive resource for people management People Strategy: How to Invest in People and Make Culture Your Competitive Advantage provides readers with a powerful framework in which to develop high-performing teams, increase employee motivation, and use data to build an inviting and effective company culture. Author Jack Altman, cofounder and CEO of Lattice, an award-winning HR and performance management platform, shows you how to: Establish the values that will form the bedrock of your organization Develop feedback processes that help employees feel heard, supported, and equipped to succeed Monitor the breadth and depth of employee engagement in your company Use the data and insights created by your People Strategy to drive business results Perfect for executives, managers, and human resource professionals, People Strategy also belongs on the bookshelves of anyone with even an interest in how to develop, nurture, and unlock the potential of their employees and colleagues.




Transformational Security Awareness


Book Description

Expert guidance on the art and science of driving secure behaviors Transformational Security Awareness empowers security leaders with the information and resources they need to assemble and deliver effective world-class security awareness programs that drive secure behaviors and culture change. When all other processes, controls, and technologies fail, humans are your last line of defense. But, how can you prepare them? Frustrated with ineffective training paradigms, most security leaders know that there must be a better way. A way that engages users, shapes behaviors, and fosters an organizational culture that encourages and reinforces security-related values. The good news is that there is hope. That’s what Transformational Security Awareness is all about. Author Perry Carpenter weaves together insights and best practices from experts in communication, persuasion, psychology, behavioral economics, organizational culture management, employee engagement, and storytelling to create a multidisciplinary masterpiece that transcends traditional security education and sets you on the path to make a lasting impact in your organization. Find out what you need to know about marketing, communication, behavior science, and culture management Overcome the knowledge-intention-behavior gap Optimize your program to work with the realities of human nature Use simulations, games, surveys, and leverage new trends like escape rooms to teach security awareness Put effective training together into a well-crafted campaign with ambassadors Understand the keys to sustained success and ongoing culture change Measure your success and establish continuous improvements Do you care more about what your employees know or what they do? It's time to transform the way we think about security awareness. If your organization is stuck in a security awareness rut, using the same ineffective strategies, materials, and information that might check a compliance box but still leaves your organization wide open to phishing, social engineering, and security-related employee mistakes and oversights, then you NEED this book.




Security Awareness For Dummies


Book Description

Make security a priority on your team Every organization needs a strong security program. One recent study estimated that a hacker attack occurs somewhere every 37 seconds. Since security programs are only as effective as a team’s willingness to follow their rules and protocols, it’s increasingly necessary to have not just a widely accessible gold standard of security, but also a practical plan for rolling it out and getting others on board with following it. Security Awareness For Dummies gives you the blueprint for implementing this sort of holistic and hyper-secure program in your organization. Written by one of the world’s most influential security professionals—and an Information Systems Security Association Hall of Famer—this pragmatic and easy-to-follow book provides a framework for creating new and highly effective awareness programs from scratch, as well as steps to take to improve on existing ones. It also covers how to measure and evaluate the success of your program and highlight its value to management. Customize and create your own program Make employees aware of the importance of security Develop metrics for success Follow industry-specific sample programs Cyberattacks aren’t going away anytime soon: get this smart, friendly guide on how to get a workgroup on board with their role in security and save your organization big money in the long run.




Build a Security Culture


Book Description

Understand how to create a culture that promotes cyber security within the workplace. Using his own experiences, the author highlights the underlying cause for many successful and easily preventable attacks.




Cybersecurity Readiness


Book Description

"Information security has become an important and critical component of every organization. In his book, Professor Chatterjee explains the challenges that organizations experience to protect information assets. The book sheds light on different aspects of cybersecurity including a history and impact of the most recent security breaches, as well as the strategic and leadership components that help build strong cybersecurity programs. This book helps bridge the gap between academia and practice and provides important insights that may help professionals in every industry." Mauricio Angee, Chief Information Security Officer, GenesisCare USA, Fort Myers, Florida, USA "This book by Dave Chatterjee is by far the most comprehensive book on cybersecurity management. Cybersecurity is on top of the minds of board members, CEOs, and CIOs as they strive to protect their employees and intellectual property. This book is a must-read for CIOs and CISOs to build a robust cybersecurity program for their organizations." Vidhya Belapure, Chief Information Officer, Huber Engineered Materials & CP Kelco, Marietta, Georgia, USA Cybersecurity has traditionally been the purview of information technology professionals, who possess specialized knowledge and speak a language that few outside of their department can understand. In our current corporate landscape, however, cybersecurity awareness must be an organization-wide management competency in order to mitigate major threats to an organization’s well-being—and be prepared to act if the worst happens. With rapidly expanding attacks and evolving methods of attack, organizations are in a perpetual state of breach and have to deal with this existential threat head-on. Cybersecurity preparedness is a critical and distinctive competency, and this book is intended to help students and practitioners develop and enhance this capability, as individuals continue to be both the strongest and weakest links in a cyber defense system. In addition to providing the non-specialist with a jargon-free overview of cybersecurity threats, Dr. Chatterjee focuses most of the book on developing a practical and easy-to-comprehend management framework and success factors that will help leaders assess cybersecurity risks, address organizational weaknesses, and build a collaborative culture that is informed and responsive. Through brief case studies, literature review, and practical tools, he creates a manual for the student and professional alike to put into practice essential skills for any workplace.




The Transformational Consumer


Book Description

This book uses stories and case studies from several industries to show how companies can rethink their customers, products and services, marketing, competition, and even their culture. The goal is a positive customer relationship that results in revenue growth, product innovation, and employee engagement.




The Customer-Driven Culture: A Microsoft Story


Book Description

If you’re striving to make products and services that your customers will love, then you’ll need a customer-driven organization. As companies transform their businesses to meet the demands of the digital age, they find themselves grappling with uniquely human challenges. Organizational knowledge becomes siloed, employees move to safeguard their expertise, and customer data creates polarization and infighting between teams. All of these challenges widen the distance between the people who make your products and the customers who use them. To meet today’s challenges, companies need to do more than build processes for customer-driven products. They need to create a customer-driven culture. With the help of his friend and mentor Monty Hammontree, Travis Lowdermilk takes readers through the cultural transformation of the Developer Division at Microsoft. This book shows readers how to "hack" their culture and reduce the distance between them and their customers’ needs. It’s a uniquely personal story that’s told amidst a cultural revolution at one of the largest software companies in the world. This story acts as your guide. You’ll learn how to: Establish a Common Language: Help employees change their thinking and actions Build Bridges, Not Walls: Treat product building as a team sport Encourage Learning Versus Knowing: Help your team understand their customers Build Leaders That Build Your Culture: Showcase star employees to inspire others Meet Teams Where They Are: Make it easy for teams to to adopt vital behavior changes Make Data Relatable: Move beyond numbers and focus on empathizing with customers




Everybody Matters


Book Description

“Bob Chapman, CEO of the $1.7 billion manufacturing company Barry-Wehmiller, is on a mission to change the way businesses treat their employees.” – Inc. Magazine Starting in 1997, Bob Chapman and Barry-Wehmiller have pioneered a dramatically different approach to leadership that creates off-the-charts morale, loyalty, creativity, and business performance. The company utterly rejects the idea that employees are simply functions, to be moved around, "managed" with carrots and sticks, or discarded at will. Instead, Barry-Wehmiller manifests the reality that every single person matters, just like in a family. That’s not a cliché on a mission statement; it’s the bedrock of the company’s success. During tough times a family pulls together, makes sacrifices together, and endures short-term pain together. If a parent loses his or her job, a family doesn’t lay off one of the kids. That’s the approach Barry-Wehmiller took when the Great Recession caused revenue to plunge for more than a year. Instead of mass layoffs, they found creative and caring ways to cut costs, such as asking team members to take a month of unpaid leave. As a result, Barry-Wehmiller emerged from the downturn with higher employee morale than ever before. It’s natural to be skeptical when you first hear about this approach. Every time Barry-Wehmiller acquires a company that relied on traditional management practices, the new team members are skeptical too. But they soon learn what it’s like to work at an exceptional workplace where the goal is for everyone to feel trusted and cared for—and where it’s expected that they will justify that trust by caring for each other and putting the common good first. Chapman and coauthor Raj Sisodia show how any organization can reject the traumatic consequences of rolling layoffs, dehumanizing rules, and hypercompetitive cultures. Once you stop treating people like functions or costs, disengaged workers begin to share their gifts and talents toward a shared future. Uninspired workers stop feeling that their jobs have no meaning. Frustrated workers stop taking their bad days out on their spouses and kids. And everyone stops counting the minutes until it’s time to go home. This book chronicles Chapman’s journey to find his true calling, going behind the scenes as his team tackles real-world challenges with caring, empathy, and inspiration. It also provides clear steps to transform your own workplace, whether you lead two people or two hundred thousand. While the Barry-Wehmiller way isn’t easy, it is simple. As the authors put it: "Everyone wants to do better. Trust them. Leaders are everywhere. Find them. People achieve good things, big and small, every day. Celebrate them. Some people wish things were different. Listen to them. Everybody matters. Show them."