Security Culture

Hilary Walton is an Organisational Psychologist and works for Airways, New Zealand’s air navigation service provider, as their Resilience and Continuity Manager. She provides advice to ensure that critical business processes across the organisation are sufficiently resilient to continue operating effectively. This includes activities such as oversight of security, change management, business continuity planning, software assurance and safety change processes. She has also worked for the Olympic Delivery Authority (ODA) where she helped to implement culture change and had privacy and data protection responsibilities. Hilary formerly led a Security Culture project for a UK Government security authority before working for the Olympics. She is a Chartered and HPC registered senior Organisational Psychologist with consulting experience in both the United Kingdom and Australasia. She has worked within both private and public organisational settings, ranging from the Royal New Zealand Air Force through to large government clients and telecom organisations.

Chapter 1 Introduction; Chapter 2 What Is Security Culture and People Risk? Why Are They Important?; Chapter 3 Building the Business Case for Security Culture and People Risk Management: Getting Senior Level Buy-in and Commitment; Chapter 4 Assessing Security Culture; Chapter 5 How to Improve Security Culture: Intervention Toolkit; Chapter 6 How to Prioritise What to Do Next; Chapter 7 Metrics: Measuring the Impact on the Organisation; Chapter 8 Case Studies; cs1 Case Study 1: Olympic Delivery Authority; cs2 Case Study 2: A Large Company Supplying Vital Services; cs3 Case Study 3: A Small Start-Up; cs4 Case Study 4: A Government Organisation; cs5 Case Study 5: Risk Management Culture; cs6 Case Study 6: Learning the Hard Way;