在复杂组织中构建网络安全文化的挑战与解决方案.pdf

1、Challenges and solutions for building a cybersecurity culture in a complex organizationSANS HRM Summit 2025 Thank you for this interesting session!Was very useful info.Thank you!This was actually a great training,kudos!Interesting and useful.Is there a way to opt-out from getting these phishing trai

2、ning emails?These phishing training are so annoying,I just ignore them.Theyre way too easy,Id never fall for one5in numbersFounded in 1910115 years of experience in the elevator industryOver60,000employeesOver600,000customers worldwide2 billionAs a global leader in the elevator and escalator industr

3、y,we move two billion people every day.From theory to reality:what it really means to lead cybersecurity culture7You cant change what you dont understandHow do we turn awareness into culture?9 Annual activity clock Cybersecurity portal Monthly intranet articles CyberTalks Cybersecurity newsletter fo

4、r leadership Mandatory cybersecurity course AI-driven adaptive phishing training No behavior catalog No strategy behind content No defined goals or audience No human risk framework No culture maturity assessment Leadership metric:only phishing fail rate A clear WHY behind10Whats already in actionWha

5、t was missingCyber culture,with a plan114.LONG-TERM IMPACTUse results to build strategic plans.1.BUILDCreated the Human Risk Framework.Define metrics,dashboards,behavior catalog.3.TARGET&REFINETargeted behaviors by risk.Create specific strategies and measure change.2.ENGAGE&MEASURECollaborated with

6、other teams,started monthly tracking,built consistency.Geographic,cultural&rolefragmentation A massive puzzleOne company.Many realities.13Where they are countries®ionsWho they are Roles14Embrace the complexityBuild personas,not just org chartsCo-create with