NCSC publishes organisational cybersecurity culture guidelines

The National Cyber Security Centre (NCSC) has published new guidelines describing the necessary conditions organisations should foster to develop a culture that supports successful cybersecurity programmes. The cyber security culture principles identify three essential elements for cultivating a supportive cyberculture: integrating new expertise from cybersecurity professionals, introducing novel assessment tools and methods from culture specialists, and securing a top-down commitment from organisational leaders.

The NCSC highlights the vital role individuals play in cybersecurity, as their daily decisions directly impact security posture. Research indicates a strong correlation between an organisation's cyberculture and its employees' ability to maintain required security standards.