Security Culture: The Forgotten Layer of Cyber Defense

As cyber threats continue to become more sophisticated, many organizations focus on the technical aspects of defense. Budgets are allocated for next-generation security controls and to properly staff security operations with expert analysts and threat hunters. Too often, however, organizational leaders and IT professionals forget that building a strong security culture is their best defense.

This report is intended to help executives, senior IT leadership, and board members understand the importance of their roles in protecting their organizations and how they can build better resilience and business success with a security culture centered on the people who make up their organizations.