Trust, safety, inclusion: Workplace culture and ethics as the new cyber defence layer

In today’s globalised world, we need recognise the importance of embracing diversity, and inclusion in the workplace. Many cybersecurity workplace practices are unintentionally built around neurotypical norms, creating barriers for neurodivergent individuals such as those with autism, ADHD, dyslexia, and anxiety.

We challenge traditional views of security culture, by designing workplace culture to be inclusive of different cognitive styles. Cybersecurity organisations can gain clarity, trust, and broader participation, which are key factors in effective threat prevention and response, by supporting and lifting up their neurodiverse cybersecurity professionals.

We acknowledge neurodiverse staff may face challenges, which can be exacerbated under pressure. We need to recognize that burnout is a distinct experience of exhaustion that can occur in demanding environments like cybersecurity from more than what the job requires. This can also be from cultural and social influences as well. When you pair neurodiverse individuals with mentors who can provide guidance and support, they establish peer support networks within the workplace, you see greater response and outcomes in workplace relationships, culture and professional successes.

By recognising and celebrating these differences, companies can gain an advantage from a wealth of talent and insights that might otherwise be underutilised or ignored. Fostering a corporate environment that values these principles, organisations become stronger, more cohesive, and better equipped to navigate complex business challenges.

We emphasize neurodiverse individuals often possess exceptional attention to detail, analytical abilities, and a strong focus on problem-solving, which are all valuable assets in cybersecurity. We need practical strategies to strengthen engagement, reduce risk, and build inclusive, resilient practices that benefit all employees and shed light on why it is vital for businesses to be proactive in their approach to diversity and inclusion in order to capture and retain skilled talent found in neurodiversity.

The panel will offer a multidisciplinary perspective that draws upon organisational behaviour, risk management, and leadership theory. As cyber threats escalate, so do workplace stressors and disengagement.

Inclusion isn’t optional - it’s a resilience strategy. By embedding trust, accountability, and psychological safety into security workforce culture, we don’t just secure systems - we empower people.

Transparent communication must share the ‘why’ behind expectations of our workforce, not just the ‘what’. When employees understand purpose, they are more likely to engage authentically. Being transparent with employees reduces fear and provides clarity.

Accountability for sharing, not blaming. Everyone from executives to front-line SOC analysts should understand their specific responsibilities in cyber resilience. Training and tools should be provided so individuals can confidently take responsibility for the expected duties and scope of their role. After incidents, a root-cause, no-blame approach should be used to identify gaps and improve systems, so as not to create a culture of punishment.

Psychological safety relies upon a culture where people feel safe to report, question, and learn without shame.