Auditing, Analysing & Reporting
We assist you in comprehending areas of deficiency in security policies and everyday behaviours, the reasons behind these gaps, and effective measures to address them. Our comprehensive analysis and practical reports provide customised recommendations and measurable metrics to enhance your security culture and mitigate human cyber risks within your organisation.
Our many years of experience in analysing organisations & developing cyber security awareness, behaviour, and culture programs across various sectors including healthcare - (Private & NHS), government, third-sector & commercial has led to the creation of our robust cyber security culture framework.
We delve into the layers of your cyber security culture, focusing on four key areas: values, perceptions, awareness, and behaviours. Within these areas, we investigate:
Viewpoints as to how they are governed
Distinguishing between human error, at-risk behaviour, and intentional misconduct.
Levels of personal responsibility
Levels of self-efficacy
And many other crucial aspects that contribute to a comprehensive understanding of your organisation's cyber security culture.