Cybersecurity Culture

The culture of cybersecurity is a complex subject. We can look at cybersecurity culture from different perspectives. We can look at it from the organizational point of view or from within the culture. Each organization has a culture. Attitudes toward security have different manifestations in each organizational culture. We also see how the cybersecurity phenomenon unfolds in other cultures is complicated. Each culture reacts differently to this phenomenon. This book will emphasize both aspects of cybersecurity. From the organizational point of view, this book will emphasize the importance of the culture of cybersecurity in organizations, what it is, and how it can be achieved. This includes the human aspects of security, approach and awareness, and how we can design systems that promote the culture of security. It is also important to emphasize the psychological aspects briefly because it is a big part of the human approach. From a cultural point of view, this book will emphasize how different cultures approach the culture of cybersecurity. The cultural complexity of cybersecurity will be noted by giving examples from different cultures. How leadership in different cultures approach security and how different cultures approach change. Case studies from each culture will be presented to demonstrate different approaches to implementing security and training practices. Overall, the textbook will be a good resource for cybersecurity students who want to understand how cultures and organizations within those cultures approach security. It will also provide a good resource for instructors who would like to develop courses on cybersecurity culture. Finally, this book will be an introductory resource for anyone interested in cybersecurity's organizational or cultural aspects.

Dr. Gulsebnem Bishop is an accomplished academic and professional with a strong foundation in computer science, information systems, and cybersecurity. Holding multiple advanced degrees, including a doctorate in Computer Science and Information Systems from Pace University and several master's degrees including Cybersecurity and Business Administration, Dr. Bishop has a unique blend of expertise spanning both technical and academic disciplines. In addition to these credentials, Dr. Bishop is a certified PMP and has specialized certifications in Big Data Analytics and Database Administration, reinforcing her ability to contribute effectively to academic and industry settings alike. As an Assistant Professor of Computer Information Systems and Computer Science at Campbellsville University since 2018, Dr. Bishop has demonstrated a strong commitment to education and curriculum development. She has designed and taught graduate-level courses in Advanced Database Systems, Disaster Recovery, and Current and Emerging Technologies, among other subjects. She also held faculty and leadership roles at multiple institutions, such as University of Maryland, Washington State University, Stratford University and South University where she taught various courses including emerging technologies, database systems, and cybersecurity. Dr. Bishop has been a prolific speaker and contributor at international conferences on technology in education, particularly in Virtual Reality (VR) applications in classroom settings. Her research has been published in prestigious journals, and she has presented at numerous conferences, focusing on VR's role in transforming online learning. Dr. Bishop's extensive professional experience also spans senior roles in database systems and IT leadership across several prestigious organizations, including The American Museum of National History, the NAACP Legal Defense Fund, the United Nations Foundation, and the Human Rights Campaign. In these roles, she led initiatives to streamline data systems, and enhance IT infrastructure, consistently ensuring data security and compliance with best practices.

1. 2. 3. Threat Landscape and Cybersecurity Culture. 4. Attack Surfaces and Vulnerabilities. 5. Threat Actors, Targets and Motivation. 6. Education, Training, and Awareness (ETA) in Cybersecurity Culture. 7. Psychological Aspects of Cybersecurity Culture. 8. Importance of Leadership in Cybersecurity Culture. 9. Importance of Policies, Procedures and Compliance in Cybersecurity Culture. 10. Measuring Organizational Success in Cybersecurity Culture. 11. Beyond the Organization: National Initiatives. 12. Beyond the Organization: International Initiatives. 13. Cybersecurity Initiatives and Culture Around the World. 14. The Future of Cybersecurity Culture.