Now that we have highlighted the need for a security culture, let's look at its four main components. As we have already mentioned in the introduction, we will discuss the following four areas, which are the cornerstone of a healthy and sustainable security culture:
- Leadership support
- Training
- Testing
- Continuous communication
You will get an overview and tips that will help to you install a high-quality security culture in your organization. Keep in mind that an organization's security culture is the foundation of any security control and should be supported by an information-protection strategy. In the next part of this section, we will start with the leadership support you need to support an information-protection strategy.