How to develop a security culture, with Gert Jan Hofstede
Episode 23
May 9, 2019
Episode Outline:
Understanding the role of culture is crucial if we want to develop a security culture. Especially if we want to have a realistic chance of influencing behaviour, which is probably why we’re wanting to develop a security culture in the first place.
This is because culture is like a body of water. If you come at the water from high above at too high a velocity with a massive, weighty body of change, the body of water will act like a slab of concrete.
You’ll get a very different response if you approach the water from a closer range, at a slower speed and with something more streamlined. You’ll glide through to the underside of the water and be able to explore the intricate inner-workings of the ecosystem contained within.
It’s that understanding which will guide your cyber security awareness, behaviour, and culture initiatives towards a greater chance of success.
©Copyright Marmalade Box Limited
The Security Functions Culture with Lianne Potter.
Episode 57
April 21, 2024
Culture & behaviour with Doctor Char Sample.
Episode 56
March 17, 2024
Insights from advertising for security awareness professionals, with Matt Kasindorf.
Episode 55
January 22, 2024
A HR view on Security Awareness, with Anne Benedict.
Episode 54
December 4, 2023
Embracing diverse skills, with Lana McGill.
Episode 53
November 20, 2023
The Science Behind Metrics, with Andrew Lewis.
Episode 52
November 6, 2023
Insights from educational psychology, learning and development.
Episode 51
October 23, 2023
Breaking the land speed record. Lessons for infosec awareness professionals, with Dr. Ben Evans.
Episode 50
November 29, 2021
Thoughts on Security Awareness in Brazil with Ceu Balzano.
Episode 49
November 3, 2021
Versace, Burberry and Lacoste. Lessons for infosec awareness professionals with Geraldine Michel
Episode 48
October 18, 2021
A perspective on internal communications role in employee awareness with Sue Dewhurst.
Episode 47
October 5, 2021
The human factor in the middle of a global breach with Andy Jones.
Episode 46
September 6, 2021
An interview with my co-authors of the Cybersecurity ABC’s book.
Episode 45
August 9, 2021
An ex regulators view on awareness, behaviour and culture with Richard Thomas.
Episode 44
July 19, 2021
What role training materials must play in building security aware-rich organisations?
Episode 41
June 21, 2021
What does it take for security teams to win in the cybersecurity fight?
Episode 40
June 14, 2021
How technology can be a CISO’s best friend in changing behaviour.
Episode 39
June 7, 2021
Re-thinking the Human Factor: Cyber Security Mini Series
Episode 38
May 31, 2021
A conversation with award-winning CISO, Andrew Rose
Episode 37
April 28, 2020
Know your cyber security risks, with Prudence Smith
Episode 36
April 21, 2020
Marketing strategy applied to cyber security, with Terry O’Reilly
Episode 35
April 14, 2020
Why we need to re-think the human factor in security, with Bruce Hallas
Episode 34
April 7, 2020
Taking risks to reduce risk, with Eric Ravello
Episode 33
March 31, 2020
Simplifying Cyber Security, with Neil Frost
Episode 32
March 24, 2020
The Accidental Security Specialist, with David Shipley
Episode 31
March 17, 2020
Designing learning experiences that stick, with Megan Sumeracki
Episode 30
March 10, 2020
Storytelling for better cybersecurity, with Sarah Moffat
Episode 29
March 3, 2020
Applying marginal gains, with Chris Fleming
Episode 28
February 25, 2020
What security professionals can learn from marketers, with Kenda MacDonald
Episode 27
February 18, 2020
Reducing Cyber Risk By Reducing Friction, with Jason Hoenich
Episode 26
February 11, 2020
Effective Leadership and Organisational Change, interview with John P. Kotter
Episode 25
June 6, 2019
What children’s books can teach us about changing behaviour, with Todd Courtney
Episode 24
May 23, 2019
How to develop a security culture, with Gert Jan Hofstede
Episode 23
May 9, 2019
Eliciting Intrinsic Motivation and Reframing Problems, with Rachel Lawes
Episode 22
April 25, 2019
Episodes Review with Nathan Mielke, Director of Information Technology & Cyber Security Manager
Episode 21
April 4, 2019
Using Humour to Raise Cyber Awareness, with Bennett Arron
Episode 20
March 21, 2019
Awareness, Behaviour, and Legal and Regulatory Requirements, with Jonathan Armstrong
Episode 19
May 7, 2019
How cultural values can be used in cybersecurity attacks, with Dr Char Sample
Episode 18
February 21, 2019
Episodes Review with Craig Thomson, Security Education & Awareness Manager
Episode 17
February 7, 2019
The Human Brain vs. Awareness, Behaviour and Culture
Episode 16
December 13, 2018
Evidence-Based Methodology to Improve Learning and Development
Episode 15
November 29, 2018
Decision making and behavioural change, with Susan Weinchenk
Episode 14
November 15, 2018
Episodes Review with Security Awareness Manager, Louise Cockburn
Episode 13
October 29, 2018
Creating Behavioural Change That Becomes A Part Of The Culture, with Sue Ee Wong
Episode 12
July 6, 2018
Episodes Review, with European CISO of the Year 2017, Ed Tucker
Episode 11
June 6, 2018
Semiotics and Cybersecurity, with Rachel Lawes
Episode 10
March 29, 2018
Behavioural Change in Cybersecurity, with Dan Ariely
Episode 9
February 27, 2018
How to connect with your audience, with Ben Afia
Episode 8
February 15, 2018
A CISO Perspective, with Geordie Stewart
Episode 7
December 22, 2017
Culture and Security, with Gert Jan Hofstede
Episode 6
November 29, 2017
How advances in technology have impacted people’s behaviour, with Ciaran McMahon
Episode 5
October 2, 2017
Why behavioural economics is relevant to education & awareness programs, with Robert Madelin
Episode 4
August 31, 2017
Crafting a Message with Impact, with John Pollack
Episode 3
July 31, 2017
Eliciting Positive Behavioural Change, with Heather Dahl and Chase Cunningham
Episode 2
June 29, 2017
How to improve policy messaging and implementation, with Gregory Michaelidis
Episode 1
May 31, 2017
Re-thinking the Human Factor podcast
Welcome to the ground breaking Re-thinking the Human Factor podcast. The show which introduced the information security industry to how advances in our understanding of human awareness, behaviour and culture could open the door to designing more effective programmes to manage human factor risks.
