KnowBe4 Research was established to accurately answer, how do you measure security culture? By pooling the knowledge and experience of three of the world’s most well-known and respected security culture experts. KnowBe4 Research has a developed data-driven and evidence-based Security Culture Maturity Model and Security Culture Survey to provide an effective and easy-to-use method to assess the current state of your security culture.
The 2021 Security Culture Report is the largest study of its kind, measuring organizations’ security cultures and surveying more than 320,000 employees across 1,872 organizations worldwide.
This report provides an objective and scientific method for assessing, reporting, and comparing the relative cybersecurity culture-related strengths and weaknesses of individuals, organizations, industry sectors, and regions across the 7 dimensions of security culture.
Security Culture and Credential Sharing – Improved Security Culture Reduces Credential Sharing in Cybersecurity investigates the impact of security culture on reducing risky security behaviors such as opening phishing emails, clicking on suspicious links, and giving away credentials.
97,661 employees in 1,115 organizations worldwide were analyzed in total. The global study finds empirical evidence that security culture and security behaviors are closely linked, and improving security culture can reduce these risks 52-fold!
The 2020 Security Culture Report provides a deep dive into how security culture varies across industries, countries and regions. This year’s global report by CLTRe compiles data from over 120,000 employees in 24 countries and across 1107 organizations in 17 industries. The results reveal a large gap between the best performers and the poor performers around the globe.
Each chapter focuses on a specific industry, sharing a statistical analysis of the latest security culture benchmark figures and providing a critical review of the security culture strengths and weaknesses of each sector.
This paper provides a comprehensive resource for practitioners seeking a deeper understanding of the dimensions that comprise security culture. Knowledge of what these dimensions are, how they relate to security, and how they can be positively influenced, will provide practitioners with the tools and practical advice needed to start building and improving security culture in organizations.