{"id":22698,"date":"2020-02-11T09:00:52","date_gmt":"2020-02-11T08:00:52","guid":{"rendered":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/?p=22698"},"modified":"2020-02-24T16:00:10","modified_gmt":"2020-02-24T15:00:10","slug":"thirdspace-how-to-create-a-security-culture","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2020\/02\/11\/thirdspace-how-to-create-a-security-culture\/","title":{"rendered":"How to create a security culture: 5 steps to success"},"content":{"rendered":"
Cyber security is as hot a topic as ever in business \u2013 the UK\u2019s cybersecurity agency found that 78% of businesses rate it as a top priority.<\/p>\n
At ThirdSpace, we recognise that evaluating the security posture of your organisation<\/a> can be complex and very time consuming. It can be even harder to communicate your position and investment requirements at board level.<\/p>\n But by engaging the technical, operational, and cultural parts of the business, we help create a thorough understanding of any challenges, processes and behaviour. As John talks to IT to get a tech overview of the security posture, Harini, talks to the people to get both an operational and cultural overview.<\/p>\n A typical starting point for us is to conduct a current state assessment<\/a>. This involves a team of experienced consultants and support analysts, using a variety of analytical tools to define an up-to-date security and compliance posture score for your business. At the end of this assessment, we provide an easy-to-use visual dashboard highlighting your security posture and a detailed remediation roadmap to address any concerns.<\/p>\n But sometimes the best force for change can come from within. Here\u2019s five steps you can use to create a successful security culture.<\/p>\n The first step is understanding the impact these changes will have on your employees. Successful adoption doesn\u2019t focus on just tools and processes \u2013 it uses a people-centric approach.<\/p>\n Keeping a people-centric approach, we recently helped a recruitment company<\/a> ensure they enabled their employees to be collaborative and productive while improving their security posture. After an initial security assessment, follow-on support and strategy workshops, the organisation successfully introduced tools and technology that made them more secure.<\/p>\n What you can do as<\/strong>\u2026<\/strong><\/p>\n CEO<\/strong>:<\/strong> Engage with your board on taking a people-centric mindset and understand how the changes can impact employees at the start of the project. Let\u2019s face it, people have a natural resistance to change. Organisations need to plan for resistance. However, by showing employees the benefits of change and how it can enable them to work smarter, they will be more likely to accept change and get involved early on.<\/p>\n1.\u00a0\u00a0\u00a0\u00a0\u00a0 User impact<\/h3>\n
\nIT manager<\/strong>:<\/strong> Use a security dashboard to understand your immediate security gaps and think about how you can improve your user experience across the different personas within the organisation.
\nFirstline worker<\/strong>:<\/strong> Take a proactive approach to change and take part in workshops. Feedback to your manager\/teams while the project is ongoing.<\/p>\n2.\u00a0\u00a0\u00a0\u00a0\u00a0 Address resistance<\/h3>\n