“What’s the best security culture?” There’s no one answer. “Good” culture depends on what an organization hopes to achieve. But since most security programs follow a first principle of preventing breaches, I can offer some example cultures that are more or less suited (“good” or “bad” approaches) to meeting that goal.
These lists are not ranked, nor are cultures mutually exclusive.
Leave a reply