People-Centric Security: Transforming Your Enterprise Security Culture

A Complete People-Centric Information Security Culture Toolkit Minimize risk, protect corporate assets, and avoid catastrophic cybersecurity incidents by adopting a program philosophy that stresses the human element of security. People-Centric Security: Transforming Your Enterprise Security Culture shows, step-by-step, how to analyze and articulate your organization’s cultural security posture and migrate to a reliable, people-focused data protection model. Discover how to develop a structured implementation strategy, build behavioral models, identify problems, and transform security effectiveness. This practical guide includes downloadable templates, surveys, and metrics. Explore the people, processes, and technologies behind successful information security cultureAnalyze your security cultures and subcultures and identify conflicts and risksLaunch a security culture diagnostic project and interpret the resultsImplement the Competing Security Cultures Framework Gather data and create maps using Security Culture Diagnostic SurveysBuild Security FORCE Behavioral Models and use FORCE diagnostic toolsAssess security through the five FORCE values: failure, operations, resilience, complexity, and expertiseFacilitate people-centric security at the leadership level of your enterprise

Lance Hayden, Ph.D., CISSP, CISM, is a Managing Director in the Technology Advisory Practice of BRG, an international strategy and research firm, and an adjunct faculty member within the School of Information at the University of Texas. Dr. Hayden's security career spans 25 years across the public, private, and academic sectors. He is a former HUMINT officer with the Central Intelligence Agency (CIA) and author of IT Security Metrics.