Section: CHECKLIST | Building a Culture of Security: 2025 Session | cyberacademy

Building a Culture of Security: 2025 Session

Section outline

The checklist shows actions you can take to implement your learning in your organization. Use it to keep track of your security to-dos.
- Select activity CHECKLIST
  
  Create a Security Culture
  
  Ensure that staff understand the importance of cybersecurity
  
  Make sure everyone actively participates in staying safe
  
  Recruit Security Champions
  
  Help build and maintain security culture organization-wide
  
  Include in a job description
  
  Set aside time on a weekly basis
  
  Include people throughout the organization (IT, finance, HR, etc.)
  
  Promote Security In Your Organization
  
  Security champions can:
  
  Share relevant news stories
  
  Start an internal newsletter
  
  Write an internal blog
  
  Host talks on security topics
  
  Organize discussions among staff/teams
  
  Run tabletop exercises
  
  Run Tabletop Exercises
  
  Discussion-based scenario
  
  Document your strengths and weaknesses
  
  Test your security procedures
  
  Learn and improve
  
  Create a Positive Culture
  
  Don't blame staff for unintentional security mistakes
  
  Celebrate wins