{"product_id":"the-security-culture-playbook-isbn-9781119875239","title":"The Security Culture Playbook","description":"\u003cp\u003e\u003cb\u003eMitigate human risk and bake security into your organization’s culture from top to bottom with insights from leading experts in security awareness, behavior, and culture.\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003eThe topic of security culture is mysterious and confusing to most leaders. But it doesn’t have to be. In \u003ci\u003eThe Security Culture Playbook\u003c\/i\u003e, Perry Carpenter and Kai Roer, two veteran cybersecurity strategists deliver experience-driven, actionable insights into how to transform your organization’s security culture and reduce human risk at every level. This book exposes the gaps between how organizations have traditionally approached human risk and it provides security and business executives with the necessary information and tools needed to understand, measure, and improve facets of security culture across the organization. \u003c\/p\u003e\u003cp\u003eThe book offers: \u003c\/p\u003e\u003cul\u003e \u003cli\u003eAn expose of what security culture \u003ci\u003ereally\u003c\/i\u003e is and how it can be measured\u003c\/li\u003e \u003cli\u003eA careful exploration of the 7 dimensions that comprise security culture\u003c\/li\u003e \u003cli\u003ePractical tools for managing your security culture program, such as the Security Culture Framework and the Security Culture Maturity Model\u003c\/li\u003e \u003cli\u003eInsights into building support within the executive team and Board of Directors for your culture management program\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003eAlso including several revealing interviews from security culture thought leaders in a variety of industries, \u003ci\u003eThe Security Culture Playbook\u003c\/i\u003e is an essential resource for cybersecurity professionals, risk and compliance managers, executives, board members, and other business leaders seeking to proactively manage and reduce risk. \u003c\/p\u003e\u003cp\u003eAbout the Authors viii\u003c\/p\u003e \u003cp\u003eAcknowledgments xii\u003c\/p\u003e \u003cp\u003eIntroduction xxv\u003c\/p\u003e \u003cp\u003e\u003cb\u003ePart I: Foundation 1\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 1: You Are \u003ci\u003eHere \u003c\/i\u003e3\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eWhy All the Buzz? 4\u003c\/p\u003e \u003cp\u003eWhat Is Security Culture, Anyway? 8\u003c\/p\u003e \u003cp\u003eA Problem of Definition 9\u003c\/p\u003e \u003cp\u003eA Problem of Overconfidence 11\u003c\/p\u003e \u003cp\u003eTakeaways 12\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 2: Up-leveling the Conversation: Security Culture Is a Board-level Concern 13\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eA View from the Top 14\u003c\/p\u003e \u003cp\u003eTelling the Human Side of the Story 15\u003c\/p\u003e \u003cp\u003eWhat’s the Cost of \u003ci\u003eNot \u003c\/i\u003eGetting This Right? 16\u003c\/p\u003e \u003cp\u003eCybercriminals Are Doubling Down on Their Attacks Against Your Employees 19\u003c\/p\u003e \u003cp\u003eYour People and Security Culture Are at the Center of Everything 20\u003c\/p\u003e \u003cp\u003eThe Implication 22\u003c\/p\u003e \u003cp\u003eGetting It Right 24\u003c\/p\u003e \u003cp\u003eTakeaways 25\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 3: The Foundations of Transformation 27\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eThe Core Thesis 29\u003c\/p\u003e \u003cp\u003eThe Knowledge-Intention-Behavior Gap 29\u003c\/p\u003e \u003cp\u003eThree Realities of Security Awareness 31\u003c\/p\u003e \u003cp\u003eProgram Focus 31\u003c\/p\u003e \u003cp\u003eExtending the Discussion 33\u003c\/p\u003e \u003cp\u003eIntroducing the Security Culture Maturity Model 33\u003c\/p\u003e \u003cp\u003eThe Security Culture Maturity Model in Brief 35\u003c\/p\u003e \u003cp\u003eThe S-Curves 36\u003c\/p\u003e \u003cp\u003eThe Value of the Security Culture Maturity Model 37\u003c\/p\u003e \u003cp\u003eYou Are Always Either Building Strength or Allowing Atrophy 37\u003c\/p\u003e \u003cp\u003eTakeaways 38\u003c\/p\u003e \u003cp\u003e\u003cb\u003ePart II: Exploration 39\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 4: Just What Is Security Culture, Anyway? 41\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eLessons from Safety Culture 42\u003c\/p\u003e \u003cp\u003eA Jumble of Terms 44\u003c\/p\u003e \u003cp\u003eInformation Security Culture 45\u003c\/p\u003e \u003cp\u003eIT Security Culture 45\u003c\/p\u003e \u003cp\u003eCybersecurity Culture 46\u003c\/p\u003e \u003cp\u003eSecurity Culture in the Modern Day 46\u003c\/p\u003e \u003cp\u003eTechnology Focus 47\u003c\/p\u003e \u003cp\u003eCompliance Focus 48\u003c\/p\u003e \u003cp\u003eHuman-Reality Focus 49\u003c\/p\u003e \u003cp\u003eTakeaways 51\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 5: Critical Concepts from the Social Sciences 53\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eWhat’s the Real Goal—Awareness, Behavior, or Culture? 54\u003c\/p\u003e \u003cp\u003eComing to Terms with Our Irrational Nature 55\u003c\/p\u003e \u003cp\u003eWe Are Lazy 56\u003c\/p\u003e \u003cp\u003eWhy Don’t We Just Give Up? 60\u003c\/p\u003e \u003cp\u003eSecurity Culture—A Part of Organizational Culture 61\u003c\/p\u003e \u003cp\u003eTakeaways 62\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 6: The Components of Security Culture 63\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eA Problem of Definition 64\u003c\/p\u003e \u003cp\u003eThe Academic Perspective 64\u003c\/p\u003e \u003cp\u003eThe Practitioner Perspective 65\u003c\/p\u003e \u003cp\u003eDefining Security Culture 66\u003c\/p\u003e \u003cp\u003eSecurity Culture as Dimensions 67\u003c\/p\u003e \u003cp\u003eThe Seven Dimensions of Security Culture 69\u003c\/p\u003e \u003cp\u003eAttitudes 69\u003c\/p\u003e \u003cp\u003eBehaviors 69\u003c\/p\u003e \u003cp\u003eCognition 69\u003c\/p\u003e \u003cp\u003eCommunication 70\u003c\/p\u003e \u003cp\u003eCompliance 70\u003c\/p\u003e \u003cp\u003eNorms 70\u003c\/p\u003e \u003cp\u003eResponsibilities 71\u003c\/p\u003e \u003cp\u003eThe Security Culture Survey 71\u003c\/p\u003e \u003cp\u003eExample Findings from Measuring the Seven Dimensions 72\u003c\/p\u003e \u003cp\u003eNormalized Use of Unauthorized Services 73\u003c\/p\u003e \u003cp\u003eConfidentiality and Insider Threats 74\u003c\/p\u003e \u003cp\u003eLast Thought 74\u003c\/p\u003e \u003cp\u003eTakeaways 75\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 7: Interviews with Organizational Culture Experts and Academics 77\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eJohn R. Childress, PYXIS Culture Technologies Limited 78\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 78\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 79\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 79\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 80\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share Related to Culture Change? 81\u003c\/p\u003e \u003cp\u003eHow Does a Culture Evolve (or How Often?) 82\u003c\/p\u003e \u003cp\u003eProfessor John McAlaney, Bournemouth University, UK 82\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 83\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 83\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 83\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 84\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share Related to Culture Change? 85\u003c\/p\u003e \u003cp\u003eHow Does a Culture Evolve (or How Often?) 85\u003c\/p\u003e \u003cp\u003eDejun “Tony” Kong, PhD, Muma College of Business, University of South Florida 86\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 86\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 86\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 87\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 87\u003c\/p\u003e \u003cp\u003eMichael Leckie, Silverback Partners, LLC 87\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 88\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 89\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 90\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 90\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 91\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share Related to Culture Change? 93\u003c\/p\u003e \u003cp\u003eHow Does a Culture Evolve (or How Often?) 93\u003c\/p\u003e \u003cp\u003e\u003cb\u003ePart III: Transformation 95\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 8: Introducing the Security Culture Framework 97\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eThe Power of Three 99\u003c\/p\u003e \u003cp\u003eStep 1: Measure 100\u003c\/p\u003e \u003cp\u003eKnow Where You are 101\u003c\/p\u003e \u003cp\u003eDecide Where You Want to Be 102\u003c\/p\u003e \u003cp\u003eFind Your Gap 104\u003c\/p\u003e \u003cp\u003eStep 2: Involve 106\u003c\/p\u003e \u003cp\u003eBuilding Support 106\u003c\/p\u003e \u003cp\u003eDifferent Audiences 108\u003c\/p\u003e \u003cp\u003eStep 3: Engage 109\u003c\/p\u003e \u003cp\u003eRinse and Repeat 111\u003c\/p\u003e \u003cp\u003eBenefits of Using the Security Culture Framework 111\u003c\/p\u003e \u003cp\u003eTakeaways 112\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 9: The Secrets to Measuring Security Culture 113\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eConnecting Awareness, Behavior, and Culture 115\u003c\/p\u003e \u003cp\u003eHow Can You Measure the Unseen? 116\u003c\/p\u003e \u003cp\u003eUsing Existing Data 116\u003c\/p\u003e \u003cp\u003eThe Right Way to Use Data 119\u003c\/p\u003e \u003cp\u003eMethods of Measuring Culture 119\u003c\/p\u003e \u003cp\u003eObservation 120\u003c\/p\u003e \u003cp\u003eExperimentation 121\u003c\/p\u003e \u003cp\u003eInterrogation (Surveys and Interviews) 121\u003c\/p\u003e \u003cp\u003eA\/B Testing 122\u003c\/p\u003e \u003cp\u003eMultiple Metrics, Single Score 124\u003c\/p\u003e \u003cp\u003eTrends 125\u003c\/p\u003e \u003cp\u003eA Note Regarding Completion Rates 127\u003c\/p\u003e \u003cp\u003eTakeaways 128\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 10: How to Influence Culture 129\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eResistance to Change 130\u003c\/p\u003e \u003cp\u003eBe Proactive 131\u003c\/p\u003e \u003cp\u003eThe Complexity of Culture 133\u003c\/p\u003e \u003cp\u003eUsing the Seven Dimensions to Influence Your Security Culture 134\u003c\/p\u003e \u003cp\u003eAttitudes 134\u003c\/p\u003e \u003cp\u003eBehaviors 136\u003c\/p\u003e \u003cp\u003eCognition 138\u003c\/p\u003e \u003cp\u003eCommunication 140\u003c\/p\u003e \u003cp\u003eCompliance 141\u003c\/p\u003e \u003cp\u003eNorms 143\u003c\/p\u003e \u003cp\u003eResponsibilities 144\u003c\/p\u003e \u003cp\u003eHow Do You Know Which Dimension to Target? 146\u003c\/p\u003e \u003cp\u003eTakeaways 147\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 11: Culture Sticking Points 149\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eDoes Culture Change Have to Be Difficult? 150\u003c\/p\u003e \u003cp\u003eUsing Norms Is a Double-Edged Sword 151\u003c\/p\u003e \u003cp\u003eFailing to Plan Is Planning to Fail 152\u003c\/p\u003e \u003cp\u003eIf You Try to Work Against Human Nature, You Will Fail 153\u003c\/p\u003e \u003cp\u003eNot Seeing the Culture You Are Embedded In 155\u003c\/p\u003e \u003cp\u003eTakeaways 156\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 12: Planning and Maturing Your Program 157\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eTaking Stock of What We’ve Covered 158\u003c\/p\u003e \u003cp\u003eView Your Culture Through Your Employees’ Eyes 159\u003c\/p\u003e \u003cp\u003eCulture Carriers 160\u003c\/p\u003e \u003cp\u003eBuilding and Modeling Maturity 161\u003c\/p\u003e \u003cp\u003eExploring the Data 162\u003c\/p\u003e \u003cp\u003eCulture Maturity Indicators 162\u003c\/p\u003e \u003cp\u003eLevel 1: Basic Compliance 165\u003c\/p\u003e \u003cp\u003eLevel 2: Security Awareness Foundation 165\u003c\/p\u003e \u003cp\u003eLevel 3: Programmatic Security Awareness \u0026amp; Behavior 166\u003c\/p\u003e \u003cp\u003eLevel 4: Security Behavior Management 167\u003c\/p\u003e \u003cp\u003eLevel 5: Sustainable Security Culture 168\u003c\/p\u003e \u003cp\u003eThere Are Stories in the Data 170\u003c\/p\u003e \u003cp\u003eA Seat at the Table 174\u003c\/p\u003e \u003cp\u003eTakeaways 175\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 13: Quick Tips for Gaining and Maintaining Support 177\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eYou Are a Guide 178\u003c\/p\u003e \u003cp\u003eSell by Using Stories 179\u003c\/p\u003e \u003cp\u003eLead with Empathy, Know Your Audience 180\u003c\/p\u003e \u003cp\u003eSet Expectations 184\u003c\/p\u003e \u003cp\u003eTakeaways 185\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 14: Interviews with Security Culture Thought Leaders 187\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eAlexandra Panaretos, Ernst \u0026amp; Young 188\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 188\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 189\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share Related to Culture Change? 190\u003c\/p\u003e \u003cp\u003eDr. Jessica Barker, Cygenta 193\u003c\/p\u003e \u003cp\u003eWhy Is Security Culture Important? 193\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 194\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 194\u003c\/p\u003e \u003cp\u003eWhat Is Your Most Interesting Experience with Culture? 195\u003c\/p\u003e \u003cp\u003eKathryn Tyrpak, Jaguar Land Rover 195\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 195\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 196\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 196\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 196\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 197\u003c\/p\u003e \u003cp\u003eLauren Zink, Boeing 197\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 198\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 198\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 199\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 199\u003c\/p\u003e \u003cp\u003eMark Majewski, Rock Central 200\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 200\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 200\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 201\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 201\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 201\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share Related to Culture Change? 202\u003c\/p\u003e \u003cp\u003eHow Does a Culture Evolve (or How Often?) 202\u003c\/p\u003e \u003cp\u003eMo Amin, moamin.com 203\u003c\/p\u003e \u003cp\u003eWhy Is Culture Important? 203\u003c\/p\u003e \u003cp\u003eWhy Do You Find Culture Interesting? 203\u003c\/p\u003e \u003cp\u003eIs There a Specific Definition of Culture That You Find Useful? 203\u003c\/p\u003e \u003cp\u003eHow Do You Use Metrics to Improve Culture \/ Measure the Effectiveness of Cultural Change? 203\u003c\/p\u003e \u003cp\u003eWhat Actions Can Be Taken to Direct Cultural Change? 204\u003c\/p\u003e \u003cp\u003eIs There a Success or Horror Story You’d Like to Share\u003c\/p\u003e \u003cp\u003eRelated to Culture Change? 204\u003c\/p\u003e \u003cp\u003eHow Does a Culture Evolve (or How Often)? 205\u003c\/p\u003e \u003cp\u003e\u003cb\u003eChapter 15: Parting Thoughts 207\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eEngage the Community 208\u003c\/p\u003e \u003cp\u003eBe a Lifelong Learner 209\u003c\/p\u003e \u003cp\u003eBe a Realistic Optimist 210\u003c\/p\u003e \u003cp\u003eConclusion 211\u003c\/p\u003e \u003cp\u003eBibliography 213\u003c\/p\u003e \u003cp\u003eIndex 217\u003c\/p\u003e  \u003cp\u003e\u003cb\u003ePERRY CARPENTER, C|CISO, MSIA,\u003c\/b\u003e is an author, podcaster, thought leader, and cybersecurity expert specializing in security awareness and the human factors of security. His research focuses on marketing, communication, behavior science, organizational culture management, sociology, and more. \u003c\/p\u003e\u003cp\u003e\u003cb\u003eKAI ROER\u003c\/b\u003e is the author of several books on security and leadership, a keynote speaker, and a thought leader in the security culture field. In addition to his research, he is an entrepreneur and the inventor of technology and frameworks that transformed the information security industry.  \u003c\/p\u003e\u003cp\u003e\u003cb\u003eAn expert demonstration of weaving security into your organization’s culture\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003eIn \u003ci\u003eThe Security Culture Playbook,\u003c\/i\u003e two of the world’s foremost experts in security awareness, behavior, and culture deliver actionable insights—grounded in data and their own extensive experience—into how to revamp your organization’s security culture and reduce behavioral risk at every level of your company. You’ll discover the shortcomings in how firms have traditionally approached human risk and strategies and how to understand, measure, and improve every facet of your company’s security culture. \u003c\/p\u003e\u003cp\u003eThe authors demonstrate what security culture \u003ci\u003ereally \u003c\/i\u003emeans and how it can be measured, and identify the seven dimensions that make up a culture of security. You’ll find practical tools for managing your security culture program, including the celebrated Security Culture Framework and Security Culture Maturity Model. Importantly, you’ll also gain critical insights into how to build support within your executive team and Board of Directors to implement your culture management program. \u003c\/p\u003e\u003cp\u003ePerfect for cybersecurity professionals, risk and compliance managers, executives, board members, and other business leaders, \u003ci\u003eThe Security Culture Playbook \u003c\/i\u003edelivers a concrete blueprint for producing real change, reducing risk, and proactively managing your company’s exposure to cybersecurity threats. You’ll also find: \u003c\/p\u003e\u003cul\u003e\u003cb\u003e\u003cli\u003eRevealing interviews from security culture thought leaders in a variety of industries\u003c\/li\u003e \u003cli\u003eStrategies for bringing all the security culture pieces together into a coherent program\u003c\/li\u003e \u003cli\u003eActionable and modern insights from sociology and other academic disciplines\u003c\/li\u003e \u003cli\u003eIn-depth explanations of how to implement and shape behavioral outcomes, foster social pressures, and create positive patterns\u003c\/li\u003e\u003c\/b\u003e\u003c\/ul\u003e  \u003cp\u003e\u003cb\u003e\u003ci\u003e“Perry’s exploration of security as a cultural force, created by processes and communications but separate from them, is a unique look into precisely that zone of our identity.” \u003c\/i\u003e\u003c\/b\u003e\u003c\/p\u003e \u003cp\u003e\u003cb\u003e— Matt Wallaert, Behavioral Scientist and author of \u003ci\u003eStart At The End: How to Build Products That Create Change\u003c\/i\u003e\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003cb\u003e\u003ci\u003e“ Perry has his finger on the pulse of security awareness culture and knows how to bring it to life. His real-world expert advice focuses on what is actionable and most essential for protecting your organization right now.”\u003c\/i\u003e\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003cb\u003e—Rachel Tobac, CEO of SocialProof Security and Friendly Hacker\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003cb\u003e\u003ci\u003e“I can’t think of a better guide for organizational executives trying to reduce their inherent risk via an improved internal security culture.”\u003c\/i\u003e\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003cb\u003e—Rick Howard, CSO, Chief Analyst, and Senior Fellow at the CyberWire\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003cb\u003e\u003ci\u003e“I have seen Kai Roer demonstrate his passion and sincere dedication to improving the security culture of organizations for many years … Kai providing guidance for executives to understand their role and responsibility for creating a secure business ecosystem through using\u003c\/i\u003e The Security Culture Playbook \u003ci\u003eis a brilliant idea!”\u003c\/i\u003e\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003cb\u003e—Rebecca Herold, CEO of The Privacy Professor consultancy, and Privacy \u0026amp; Security Brainiacs SaaS services\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003cb\u003e\u003ci\u003e“There is no one better placed to present expertise related to security culture than Kai.”\u003c\/i\u003e\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003cb\u003e—Raj Samani, McAfee Fellow, Chief Scientist\u003c\/b\u003e\u003c\/p\u003e","brand":"Wiley","offers":[{"title":"Default Title","offer_id":47990338224357,"sku":"NP9781119875239","price":25.0,"currency_code":"USD","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1842\/7735\/files\/9781119875239.jpg?v=1761787416","url":"https:\/\/k12savings.com\/products\/the-security-culture-playbook-isbn-9781119875239","provider":"K12savings","version":"1.0","type":"link"}