The blueprint for a secure workplace: Building a strong security culture from the ground up

Studies show that 89% of CISOs are prioritising the development of a security culture, but many struggle with where to begin. Far too often, security culture is seen as something that will emerge naturally or will arrive as a side effect of other initiatives but neither are true - it requires intentional effort.

This session is designed to bridge that gap, offering practical strategies to help security leaders actively build a culture that strengthens security awareness, minimises human error, and mitigates risks in today’s evolving threat landscape.

The session will validate the human risk scenarios, and demonstrate the true value of a security culture – reducing both risk and workload for the security function. It with then drive into how CISOs can pragmatically address the topic – walking through the phases of maturity (Awareness, Behaviour, Culture) describing why each is relevant, what they mean, and, most importantly, what practical steps need to be taken to transition between these levels.

The proposed solutions are based on the practical experience of the speakers, and behavioural science principles. They include

The content finishes with a brief discussion of what comes after ‘culture’ – the future of education, awareness and training.

Attendants will walk away with actionable insights that will empower them to build a resilient, security-conscious organisation—one where security is not just a policy, but a shared value that truly changes behaviour.