The Importance of a Security Culture in Organisations
A culture involves the ideas, customs, and social behaviour of a particular group of people or society. In the context of security, this culture combines thinking from the social sciences including psychology, sociology, organisational theory and change management.
According to the Australian Government, through the development of an active security culture, the threat to an organisation and its assets can be significantly decreased, highlighting why it is the responsibility of every employee, from the top down, to make security a priority.
Security leaders are encouraged to consider and promote strategies that will enhance security culture across organisations. This includes formalisation of a security policy, a security plan, security protocols and a security awareness program.
Contractors should also be included in site-related strategies as their presence can often provide additional exposures for security breaches including access vulnerabilities and failures to follow organisational rules and standards.
ASIS International publishes online various guidelines for its members. As standards and guidelines are continually reviewed it is recommended reference be made to these materials.