Rational Cybersecurity for Business: The Security Leaders' Guide to Business Alignment

© The Author(s) 2020

D. BlumRational Cybersecurity for Businesshttps://doi.org/10.1007/978-1-4842-5952-8_4

4. Strengthen Security Culture Through Communications and Awareness Programs

Dan Blum¹ 

(1)

Silver Spring, MD, USA

 

Human error or misconduct of one kind or another must be either the direct cause or a contributing factor to almost every security breach or outage. Whether it is the user clicking a phishing link, an operator accidentally deleting the corporate directory, a manager approving excessive privileges, a receptionist letting a thief or spy into the building, or an incident responder hitting the snooze button on the wrong malware alarm, the examples are legion.

Security leaders should strive to improve security-related behavior through ...