The Security Culture Playbook


Book Description

Mitigate human risk and bake security into your organization’s culture from top to bottom with insights from leading experts in security awareness, behavior, and culture. The topic of security culture is mysterious and confusing to most leaders. But it doesn’t have to be. In The Security Culture Playbook, Perry Carpenter and Kai Roer, two veteran cybersecurity strategists deliver experience-driven, actionable insights into how to transform your organization’s security culture and reduce human risk at every level. This book exposes the gaps between how organizations have traditionally approached human risk and it provides security and business executives with the necessary information and tools needed to understand, measure, and improve facets of security culture across the organization. The book offers: An expose of what security culture really is and how it can be measured A careful exploration of the 7 dimensions that comprise security culture Practical tools for managing your security culture program, such as the Security Culture Framework and the Security Culture Maturity Model Insights into building support within the executive team and Board of Directors for your culture management program Also including several revealing interviews from security culture thought leaders in a variety of industries, The Security Culture Playbook is an essential resource for cybersecurity professionals, risk and compliance managers, executives, board members, and other business leaders seeking to proactively manage and reduce risk.




The Cybersecurity Playbook


Book Description

The real-world guide to defeating hackers and keeping your business secure Many books discuss the technical underpinnings and complex configurations necessary for cybersecurity—but they fail to address the everyday steps that boards, managers, and employees can take to prevent attacks. The Cybersecurity Playbook is the step-by-step guide to protecting your organization from unknown threats and integrating good security habits into everyday business situations. This book provides clear guidance on how to identify weaknesses, assess possible threats, and implement effective policies. Recognizing that an organization’s security is only as strong as its weakest link, this book offers specific strategies for employees at every level. Drawing from her experience as CMO of one of the world’s largest cybersecurity companies, author Allison Cerra incorporates straightforward assessments, adaptable action plans, and many current examples to provide practical recommendations for cybersecurity policies. By demystifying cybersecurity and applying the central concepts to real-world business scenarios, this book will help you: Deploy cybersecurity measures using easy-to-follow methods and proven techniques Develop a practical security plan tailor-made for your specific needs Incorporate vital security practices into your everyday workflow quickly and efficiently The ever-increasing connectivity of modern organizations, and their heavy use of cloud-based solutions present unique challenges: data breaches, malicious software infections, and cyberattacks have become commonplace and costly to organizations worldwide. The Cybersecurity Playbook is the invaluable guide to identifying security gaps, getting buy-in from the top, promoting effective daily security routines, and safeguarding vital resources. Strong cybersecurity is no longer the sole responsibility of IT departments, but that of every executive, manager, and employee.




Transformational Security Awareness


Book Description

Expert guidance on the art and science of driving secure behaviors Transformational Security Awareness empowers security leaders with the information and resources they need to assemble and deliver effective world-class security awareness programs that drive secure behaviors and culture change. When all other processes, controls, and technologies fail, humans are your last line of defense. But, how can you prepare them? Frustrated with ineffective training paradigms, most security leaders know that there must be a better way. A way that engages users, shapes behaviors, and fosters an organizational culture that encourages and reinforces security-related values. The good news is that there is hope. That’s what Transformational Security Awareness is all about. Author Perry Carpenter weaves together insights and best practices from experts in communication, persuasion, psychology, behavioral economics, organizational culture management, employee engagement, and storytelling to create a multidisciplinary masterpiece that transcends traditional security education and sets you on the path to make a lasting impact in your organization. Find out what you need to know about marketing, communication, behavior science, and culture management Overcome the knowledge-intention-behavior gap Optimize your program to work with the realities of human nature Use simulations, games, surveys, and leverage new trends like escape rooms to teach security awareness Put effective training together into a well-crafted campaign with ambassadors Understand the keys to sustained success and ongoing culture change Measure your success and establish continuous improvements Do you care more about what your employees know or what they do? It's time to transform the way we think about security awareness. If your organization is stuck in a security awareness rut, using the same ineffective strategies, materials, and information that might check a compliance box but still leaves your organization wide open to phishing, social engineering, and security-related employee mistakes and oversights, then you NEED this book.




Build a Security Culture


Book Description

Understand how to create a culture that promotes cyber security within the workplace. Using his own experiences, the author highlights the underlying cause for many successful and easily preventable attacks.




The Culture Playbook


Book Description

The ultimate handbook for fostering and cultivating a strong team culture, from the New York Times bestselling author of The Culture Code and The Talent Code. “If you are a leader—or if you work with one—and want to understand how to build psychological safety, trust, and a sense of purpose for your team, then you need this book.”—Charles Duhigg, author of The Power of Habit Building a team has never been harder than it is right now. How do you create connection and trust? How do you stay focused on your goals? In his years studying the ways successful groups work together, Daniel Coyle has spent time with elite teams around the world, observing the ways they support each other, manage conflict, and move toward a common goal. In The Culture Playbook, he distills everything he has learned into sixty concrete, actionable tips and exercises that will help your team build a cohesive, positive culture. Great cultures, Coyle has found, are built on three essential skills: safety, vulnerability, and purpose. Within this framework, he shows us how we can better serve our teammates, ourselves, and our shared purpose, including: • scheduling regular team “tune-ups” to place an explicit spotlight on the team’s inner workings and create conversations that surface and improve team dynamics • creating spaces for remote coworkers to connect with their colleagues to foster a team spirit even across distances • holding an anxiety party to serve as a pressure-relief valve, as well as a platform for people to connect and solve problems together With reflections, exercises, and practical tips that will prove invaluable to companies, athletes, and families alike, and replete with black-and-white illustrations, The Culture Playbook is an indispensable guide to ensuring that your team performs at its best.




The Security Leader’s Communication Playbook


Book Description

This book is for cybersecurity leaders across all industries and organizations. It is intended to bridge the gap between the data center and the board room. This book examines the multitude of communication challenges that CISOs are faced with every day and provides practical tools to identify your audience, tailor your message and master the art of communicating. Poor communication is one of the top reasons that CISOs fail in their roles. By taking the step to work on your communication and soft skills (the two go hand-in-hand), you will hopefully never join their ranks. This is not a “communication theory” book. It provides just enough practical skills and techniques for security leaders to get the job done. Learn fundamental communication skills and how to apply them to day-to-day challenges like communicating with your peers, your team, business leaders and the board of directors. Learn how to produce meaningful metrics and communicate before, during and after an incident. Regardless of your role in Tech, you will find something of value somewhere along the way in this book.




People-Centric Security: Transforming Your Enterprise Security Culture


Book Description

A culture hacking how to complete with strategies, techniques, and resources for securing the most volatile element of information security—humans People-Centric Security: Transforming Your Enterprise Security Culture addresses the urgent need for change at the intersection of people and security. Esentially a complete security culture toolkit, this comprehensive resource provides you with a blueprint for assessing, designing, building, and maintaining human firewalls. Globally recognized information security expert Lance Hayden lays out a course of action for drastically improving organizations’ security cultures through the precise use of mapping, survey, and analysis. You’ll discover applied techniques for embedding strong security practices into the daily routines of IT users and learn how to implement a practical, executable, and measurable program for human security. Features downloadable mapping and surveying templates Case studies throughout showcase the methods explained in the book Valuable appendices detail security tools and cultural threat and risk modeling Written by an experienced author and former CIA human intelligence officer




Security Awareness For Dummies


Book Description

Make security a priority on your team Every organization needs a strong security program. One recent study estimated that a hacker attack occurs somewhere every 37 seconds. Since security programs are only as effective as a team’s willingness to follow their rules and protocols, it’s increasingly necessary to have not just a widely accessible gold standard of security, but also a practical plan for rolling it out and getting others on board with following it. Security Awareness For Dummies gives you the blueprint for implementing this sort of holistic and hyper-secure program in your organization. Written by one of the world’s most influential security professionals—and an Information Systems Security Association Hall of Famer—this pragmatic and easy-to-follow book provides a framework for creating new and highly effective awareness programs from scratch, as well as steps to take to improve on existing ones. It also covers how to measure and evaluate the success of your program and highlight its value to management. Customize and create your own program Make employees aware of the importance of security Develop metrics for success Follow industry-specific sample programs Cyberattacks aren’t going away anytime soon: get this smart, friendly guide on how to get a workgroup on board with their role in security and save your organization big money in the long run.




The Confetti Culture Playbook


Book Description

In The Confetti Culture Playbook, a book written by and for a hotel manager, James Ferguson, employee experience speaker and author, shows you how to boost your team's contribution and impact. He guides you through the process of building a strong company culture of valued employees who are engaged, enabled, and empowered to be at their best and deliver their best daily. He provides a measurable framework designed to improve your financial position by realigning your priorities and putting employees first. Please visit our website for additional resources to help you put employees first!theconfetticultureplaybook.com




The Customer-Driven Culture: A Microsoft Story


Book Description

If you’re striving to make products and services that your customers will love, then you’ll need a customer-driven organization. As companies transform their businesses to meet the demands of the digital age, they find themselves grappling with uniquely human challenges. Organizational knowledge becomes siloed, employees move to safeguard their expertise, and customer data creates polarization and infighting between teams. All of these challenges widen the distance between the people who make your products and the customers who use them. To meet today’s challenges, companies need to do more than build processes for customer-driven products. They need to create a customer-driven culture. With the help of his friend and mentor Monty Hammontree, Travis Lowdermilk takes readers through the cultural transformation of the Developer Division at Microsoft. This book shows readers how to "hack" their culture and reduce the distance between them and their customers’ needs. It’s a uniquely personal story that’s told amidst a cultural revolution at one of the largest software companies in the world. This story acts as your guide. You’ll learn how to: Establish a Common Language: Help employees change their thinking and actions Build Bridges, Not Walls: Treat product building as a team sport Encourage Learning Versus Knowing: Help your team understand their customers Build Leaders That Build Your Culture: Showcase star employees to inspire others Meet Teams Where They Are: Make it easy for teams to to adopt vital behavior changes Make Data Relatable: Move beyond numbers and focus on empathizing with customers