People-Centric Security: Transforming Your Enterprise Security Culture (Paperback)

A Complete People-Centric Information Security Culture Toolkit

Minimize risk, protect corporate assets, and avoid catastrophic cybersecurity incidents by adopting a program philosophy that stresses the human element of security. People-Centric Security: Transforming Your Enterprise Security Culture shows, step-by-step, how to analyze and articulate your organization’s cultural security posture and migrate to a reliable, people-focused data protection model. Discover how to develop a structured implementation strategy, build behavioral models, identify problems, and transform security effectiveness. This practical guide includes downloadable templates, surveys, and metrics.

• Explore the people, processes, and technologies behind successful information security culture
• Analyze your security cultures and subcultures and identify conflicts and risks
• Launch a security culture diagnostic project and interpret the results
• Implement the Competing Security Cultures Framework
• Gather data and create maps using Security Culture Diagnostic Surveys
• Build Security FORCE Behavioral Models and use FORCE diagnostic tools
• Assess security through the five FORCE values: failure, operations, resilience, complexity, and expertise
• Facilitate people-centric security at the leadership level of your enterprise

一個完整的以人為中心的資訊安全文化工具包

通過採用強調安全的人為因素的計劃理念，最大限度地降低風險，保護企業資產，避免災難性的網絡安全事件。《以人為中心的安全：轉變企業安全文化》逐步展示了如何分析和表達組織的文化安全狀態，並遷移到可靠的以人為中心的數據保護模型。了解如何制定結構化的實施策略，建立行為模型，識別問題，並轉變安全效能。這本實用指南包括可下載的模板、調查和指標。

- 探索成功的資訊安全文化背後的人、流程和技術
- 分析您的安全文化和子文化，並識別衝突和風險
- 啟動安全文化診斷項目並解讀結果
- 實施競爭性安全文化框架
- 使用安全文化診斷調查收集數據並創建地圖
- 建立安全FORCE行為模型並使用FORCE診斷工具
- 通過五個FORCE價值（失敗、運營、恢復力、複雜性和專業知識）評估安全性
- 在企業的領導層促進以人為中心的安全