Home  |  About  |  Contact

Friday, 05 Sep , 2014

Poor Security Culture? Probably Time For TEA – For Information Security Buzz

Share this article

My answer to the August expert panel question for Information Security Buzz: In your opinion, what are 3 key elements to succeed in a positive security culture and what tips can you provide to implement change

My answer to the August expert panel question for Information Security Buzz:

Tea_SliderIn your opinion, what are 3 key elements to succeed in a positive security culture and what tips can you provide to implement change, successfully?

I took inspiration for my answer from an ex-CISO of mine, Adam Stanley (actually a CIO/CTO by trade, but he bravely took on both roles while recruiting). These are the three elements, known collectively as “TEA”, he worked hardest to embed in the IT and security culture of our organization:

–     Trust,
–     Empowerment, and
–     Accountability

My three tips take those components and translate them into concrete actions. You can find the full article here

 

Where and to whom does the GDPR apply?

Yeah, I doubted my sanity going at this one too, but here I am, because working out whether or not the GDPR would apply in different practical and geographical circumstances is proving harder than it really should...for everyone. This regulation has been my almost...