Changing security culture

Citée du UK GDaD PCF.

Niveaux

1. Sensibilisation

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

• put in place continuous cyber and information security awareness and education programs, for example, training for specific groups
• use a range of methods to assess whether people’s security behaviour is improving
• compare the maturity of security awareness and culture in your organisation against others across government to determine effective improvements
• incentivising the right behaviours across the whole organisation so that everyone knows how they contribute to security
• persuading senior leadership to represent a campaign personally
• communicating insights from previous incidents to ensure they are learned from

2. Pratique

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

• put in place continuous cyber and information security awareness and education programs, for example, training for specific groups
• use a range of methods to assess whether people’s security behaviour is improving
• compare the maturity of security awareness and culture in your organisation against others across government to determine effective improvements
• incentivising the right behaviours across the whole organisation so that everyone knows how they contribute to security
• persuading senior leadership to represent a campaign personally
• communicating insights from previous incidents to ensure they are learned from

3. Confirmé

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

• put in place continuous cyber and information security awareness and education programs, for example, training for specific groups
• use a range of methods to assess whether people’s security behaviour is improving
• compare the maturity of security awareness and culture in your organisation against others across government to determine effective improvements
• incentivising the right behaviours across the whole organisation so that everyone knows how they contribute to security
• persuading senior leadership to represent a campaign personally
• communicating insights from previous incidents to ensure they are learned from

4. Expert

*Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:

• put in place continuous cyber and information security awareness and education programs, for example, training for specific groups
• use a range of methods to assess whether people’s security behaviour is improving
• compare the maturity of security awareness and culture in your organisation against others across government to determine effective improvements
• incentivising the right behaviours across the whole organisation so that everyone knows how they contribute to security
• persuading senior leadership to represent a campaign personally
• communicating insights from previous incidents to ensure they are learned from

Contains public sector information from the UK Government Digital and Data Profession Capability Framework (https://understand-digital-data-roles-skills.service.gov.uk/), licensed under the Open Government Licence v3.0. © Crown copyright.

Compétences ESCO les plus proches

• set up cybersecurity training programmes (correspondance proche)
• educate on data confidentiality (correspondance étroite)
• shape corporate culture (correspondance large)

Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.

Niveaux de rôle qui attendent cette compétence