Building Information Security Culture Presentation

This free presentation (with provided speaking points) provides an introduction to building an information security culture to a non InfoSec audience.

Many people see these topics as problems just for security – start talking about security and people’s eyes start to glaze over.

A cultural shift is required to drive change in the organisation and move the conversation of security away from a technology problem and into a conversation about how security is integrated into the company.

Security should be one of the first things people think about, not a last resort. Security is not an add on but rather an important part of how the organisation conducts its business.

Supplier Security & Data Protection Questionnaire

It is vitally important that 3rd parties, such as contractors and suppliers, are probed for their information security and data protection posture. This is especially important with the increased use of cloud technologies and the transfer of responsibility and risk to other organisations and individuals.

This questionnaire is designed to be a starting point and as part of a wider due diligence effort before signing on the dotted line with a new 3rd party.