A security culture is considered to be the attitudes and behaviours of employees who collectively maintain, police and cultivate a strong security awareness and action in the protection of business objectives, assists and information. There is a perception throughout many organisations that security is the responsibility of security officer’s and departments. But security culture has to be inherent in the thoughts and actions of all the individuals at every level in an organization. The organisations culture towards security must be encouraged and this is a core responsibility of the organisation and its management.
All organisations are different and therefore security cultures must be designed and nurtured in a fashion that best supports the needs and requirements of the business. Although no security culture will be the same it is important to develop a suitable framework in which to build from and implement. Awareness is the gate to a strong security cultural. Being aware of the importance of security, risks and available safeguards is of crucial importance.