Operating under a good security culture is vital to developing a comprehensive defense for the prevention of cyber security breaches. But what does a good security culture look like, and how can we bridge the gap between what science says and what practitioners do?
The Security Culture Conference was established in 2015 in order to create a meeting place for practitioners and academics in the field of security awareness, behaviors and culture. By bringing together participants from different fields like computer science, social science, CISOs, and culture programme managers, the conference discusses best practices both from a practitioner and academic perspective.
The topic of security culture is becoming more prominent in the discussion about what methods protect organizations from security breaches. Here, the KnowBe4 Research team - lead by veteran security culture expert Kai Roer - brings together academics and practitioners in one platform to discuss key issues in this topic.
Experts from diverse backgrounds will present up to date research and unique perspectives on how to define, measure and implement security culture. Expert panels will also highlight the disparities between what science says and what practitioners are doing on the ground.
Participants will come away from the track with state-of-the-art knowledge about the practice and benefits of a security culture from leading experts in the field. They will also have the opportunity to engage in networking and discussions with experts from social science, business, and IT.
A key aspect to the conference is active participation. We invite both speakers, panelists and the audience to actively participate in the break out sessions, discussing security culture topics. We encourage participants to ask questions and discuss topics throughout the conference.
Thea Ulimoen, Security Culture Researcher, KnowBe4 Research
Thea Ulimoen has a background in neuroscience and psychological research. She joined the KnowBe4 Research team in 2021 as a researcher where she explores different questions related to the human factor in social engineering.
Program for this thematic track
Försnack
Keynote: Ayesha Khanna, AI-expert
Introduction
Introduction to the track by moderator.
Thea Ulimoen, Security Culture Researcher, KnowBe4 Research
Thea Ulimoen has a background in neuroscience and psychological research. She joined the KnowBe4 Research team in 2021 as a researcher where she explores different questions related to the human factor in social engineering.
A brief history of security culture; and future directions
With social engineering based cyber attacks becoming an ever increasing global threat, it is more important than ever for organizations to develop and successfully maintain a security culture. But what does security culture mean? You will get an expert overview of security culture up to the present day and how this important topic is likely to develop in the future.
Kai Roer, Managing Director, KnowBe4 Research
Kai Roer has over 25 years of experience in cybersecurity and is currently the Managing Director of KnowBe4 Research, an independent research arm of KnowBe4. Roer is the creator of the Security Culture Framework and author of 4 books on communication and security, including the best-selling guide to “Build a Security Culture”. His groundbreaking research into security culture metrics provides organizations worldwide with deep insights into the human factors that influence risk and security.
Active Break
An active break where participants can ask questions to speakers or take a break.
Thea Ulimoen, Security Culture Researcher, KnowBe4 Research
Thea Ulimoen has a background in neuroscience and psychological research. She joined the KnowBe4 Research team in 2021 as a researcher where she explores different questions related to the human factor in social engineering.
Lightning talks: Measuring Security Culture
How do we best measure security culture? The answers to this question often differ by the lens with which one studies security culture. From academic and practitioner perspectives, to differing fields such as psychology and IT, this session will highlight some of these differences through an exciting series of lightning talks from multidisciplinary professionals and academics.
Dr Brett van Niekerk, Senior Lecturer, University of KwaZulu-Natal
Dr Brett van Niekerk is a senior lecturer at the University of KwaZulu-Natal. He is chair for the IFIP Working Group on ICT in Peace and War, co-Editor-in-Chief of the International Journal of Cyber Warfare and Terrorism, and associate editor for the International Journal of Information Security and Privacy. He is involved with international cybersecurity initiatives and is CISM certified. His research focuses on cybersecurity, information warfare and critical infrastructure protection.
Dr Trishana Ramluckan, Research Manager, Educor Holdings
Dr Trishana Ramluckan is the Research Manager at Educor Holdings and an Honorary Research. Fellow at the University of KwaZulu-Natal’s School of Law. She is a member of the IFIP working group on ICT Uses in Peace and War and is an Academic Advocate for ISACA, as well as the Editor-in- Chief of the Educor Multidisciplinary Journal. She holds a Doctor of Administration specialising in IT and Public Governance and in 2020 was listed as in the Top 50 Women in Cybersecurity in Africa.
Kari-Anne Larmerud, CISO Statkraft
Kari-Anne has 20 years of experience within Business and IT, focusing on organisational elements and change management. As Information Security Responsible in Statkraft her focus the last 5 years has been solely on information security and what it takes to succeed in changing the culture of the company. Kari-Anne holds a Cand Scient degree within Informatics from the University of Oslo, Norway, and is currently pursuing a MSc in Information Security Management at Arden University.
Quentyn Taylor, Director of Information Security, Canon Europe, Middle East and Africa
Quentyn Taylor is Director of Information Security at Canon Europe, Middle East and Africa. Using the power of stories and his own experience of testing products to destruction; Quentyn has embraced building business relationships across the world whilst driving Canon’s strategy and educating business customers to minimise their security risk. Before joining Canon, Quentyn has worked in a variety of industries such as Internet service providers as well as startup businesses.
Break Out Rooms - Engaging Security Culture Discussions
In this interactive networking session you will engage in the discussing of some of the key areas of security culture. Security culture is a multidisciplinary field where academia and the industry meet and you will have the opportunity to engage with your peers in discussions on security culture topics.
Why is Security Culture Critical for Business Success?
This talk focuses on the business value of security culture. The talk will discuss why security culture is important to business, using examples from the real world. The talk aims to help security teams to communicate the importance of security culture in a business context.
Caitriona Forde, Cyber Security Communication and Awareness Program Manager – Western Power
Caitriona has 20 years’ experience in the IT industry holding various technical and leadership roles. In recent years she has focused her career on Cyber Security and recently has graduated with a Master of Cyber Security. She is extremely passionate about the human element and assisting organisations to uplift their cyber security culture. She firmly believes that a successful Awareness program should be multifaceted that is engaging and fun.
Active Break
An active break where participants can choose to participate in a QA or take a break.
Thea Ulimoen, Security Culture Researcher, KnowBe4 Research
Thea Ulimoen has a background in neuroscience and psychological research. She joined the KnowBe4 Research team in 2021 as a researcher where she explores different questions related to the human factor in social engineering.
Security Culture: The Social Science Perspective
This talk focuses on examining how the social sciences influence security culture. You will learn about how multidisciplinary perspectives can offer new insights into the field of security culture.
Dr John McAlaney, Professor of Psychology, Bournemouth University
Professor John McAlaney is a Chartered Psychologist at Bournemouth University in the UK. His work focuses on social psychological factors of risk and social identity. As part of this he has conducted research into beliefs and culture in all the actors involved in cybersecurity incidents, from the attackers to the protectors of systems. In doing so he brings an interdisciplinary approach that applies the evidence base from social science to address real world socio-technical challenges.
Active Break
An active break where participants can choose to participate in a QA or take a break.
Wrap up
Wrap up of the morning session by moderator.
Thea Ulimoen, Security Culture Researcher, KnowBe4 Research
Thea Ulimoen has a background in neuroscience and psychological research. She joined the KnowBe4 Research team in 2021 as a researcher where she explores different questions related to the human factor in social engineering.
Lunch
Introduction
Introduction to the afternoon session by moderator.
Thea Ulimoen, Security Culture Researcher, KnowBe4 Research
Thea Ulimoen has a background in neuroscience and psychological research. She joined the KnowBe4 Research team in 2021 as a researcher where she explores different questions related to the human factor in social engineering.
Panel Discussion: What works and what doesn’t in security culture
What science says and what practitioners do aren’t always correlated. What may work under experimental conditions may not always translate to actual industry practice. The fast pace of research into issues of security culture make it important to bring together multiple disciplines. In this session, a mixed panel of academics and practitioners discuss the disparities between what research says and what people are doing on the ground.
Dr Trishana Ramluckan, Research Manager, Educor Holdings
Dr Trishana Ramluckan is the Research Manager at Educor Holdings and an Honorary Research. Fellow at the University of KwaZulu-Natal’s School of Law. She is a member of the IFIP working group on ICT Uses in Peace and War and is an Academic Advocate for ISACA, as well as the Editor-in- Chief of the Educor Multidisciplinary Journal. She holds a Doctor of Administration specialising in IT and Public Governance and in 2020 was listed as in the Top 50 Women in Cybersecurity in Africa.
Dr John McAlaney, Professor of Psychology, Bournemouth University
Professor John McAlaney is a Chartered Psychologist at Bournemouth University in the UK. His work focuses on social psychological factors of risk and social identity. As part of this he has conducted research into beliefs and culture in all the actors involved in cybersecurity incidents, from the attackers to the protectors of systems. In doing so he brings an interdisciplinary approach that applies the evidence base from social science to address real world socio-technical challenges.
Anna Collard, SVP of Content Strategy & Evangelist for KnowBe4 Africa
Anna founded Popcorn Training, a South African security awareness company, acquired by KnowBe4 in 2018. Anna won the Women in Tech Innovations Throughout Africa 2020 Award for Southern and Central Africa. She featured in the Top 50 Women in Cybersecurity – Africa 2020 as well as the Top 100 Women in Cyber 2020 and 2021 globally by Cyber Defence Magazine and was awarded the ISACA South Africa President Award for 2020.
Kerissa Varma, Group Chief Information Security Officer of Old Mutual Limited
Old Mutual is one of the largest financial services organisations on the African continent with a vast footprint across 13 African Markets. She manages Information Security with dispersed teams across Africa. She has a demonstrated history of building and scaling security capabilities in a number of industries including healthcare, telecommunications, transport, government and financial services and is a passionate advocate for technology and security.
Yolanda Cornelius, Information Security Governance Officer
With more than 20 years experience in the IT industry, Yolanda Cornelius's core focus has largely been directed towards training the end user. Part of her journey as a Cyber Awareness Program Manager is to highlight and showcase how people are the prime asset to any organisation whilst also being our biggest vulnerability. As a knowledgeable, well versed keynote speaker and technical specialist, Yolanda is proficient in identifying and engaging with people from many spheres of life.
Active Break
An active break where participants can choose to participate in a QA or take a break.
Thea Ulimoen, Security Culture Researcher, KnowBe4 Research
Thea Ulimoen has a background in neuroscience and psychological research. She joined the KnowBe4 Research team in 2021 as a researcher where she explores different questions related to the human factor in social engineering.
Anna Collard, SVP of Content Strategy & Evangelist for KnowBe4 Africa
Anna founded Popcorn Training, a South African security awareness company, acquired by KnowBe4 in 2018. Anna won the Women in Tech Innovations Throughout Africa 2020 Award for Southern and Central Africa. She featured in the Top 50 Women in Cybersecurity – Africa 2020 as well as the Top 100 Women in Cyber 2020 and 2021 globally by Cyber Defence Magazine and was awarded the ISACA South Africa President Award for 2020.
Panel Discussion Continues
The panel discussion continues.
Dr Trishana Ramluckan, Research Manager, Educor Holdings
Dr Trishana Ramluckan is the Research Manager at Educor Holdings and an Honorary Research. Fellow at the University of KwaZulu-Natal’s School of Law. She is a member of the IFIP working group on ICT Uses in Peace and War and is an Academic Advocate for ISACA, as well as the Editor-in- Chief of the Educor Multidisciplinary Journal. She holds a Doctor of Administration specialising in IT and Public Governance and in 2020 was listed as in the Top 50 Women in Cybersecurity in Africa.
Dr John McAlaney, Professor of Psychology, Bournemouth University
Professor John McAlaney is a Chartered Psychologist at Bournemouth University in the UK. His work focuses on social psychological factors of risk and social identity. As part of this he has conducted research into beliefs and culture in all the actors involved in cybersecurity incidents, from the attackers to the protectors of systems. In doing so he brings an interdisciplinary approach that applies the evidence base from social science to address real world socio-technical challenges.
Anna Collard, SVP of Content Strategy & Evangelist for KnowBe4 Africa
Anna founded Popcorn Training, a South African security awareness company, acquired by KnowBe4 in 2018. Anna won the Women in Tech Innovations Throughout Africa 2020 Award for Southern and Central Africa. She featured in the Top 50 Women in Cybersecurity – Africa 2020 as well as the Top 100 Women in Cyber 2020 and 2021 globally by Cyber Defence Magazine and was awarded the ISACA South Africa President Award for 2020.
Kerissa Varma, Group Chief Information Security Officer of Old Mutual Limited
Old Mutual is one of the largest financial services organisations on the African continent with a vast footprint across 13 African Markets. She manages Information Security with dispersed teams across Africa. She has a demonstrated history of building and scaling security capabilities in a number of industries including healthcare, telecommunications, transport, government and financial services and is a passionate advocate for technology and security.
Yolanda Cornelius, Information Security Governance Officer
With more than 20 years experience in the IT industry, Yolanda Cornelius's core focus has largely been directed towards training the end user. Part of her journey as a Cyber Awareness Program Manager is to highlight and showcase how people are the prime asset to any organisation whilst also being our biggest vulnerability. As a knowledgeable, well versed keynote speaker and technical specialist, Yolanda is proficient in identifying and engaging with people from many spheres of life.
Wrap up
Wrap up of the afternoon session by moderator.
Thea Ulimoen, Security Culture Researcher, KnowBe4 Research
Thea Ulimoen has a background in neuroscience and psychological research. She joined the KnowBe4 Research team in 2021 as a researcher where she explores different questions related to the human factor in social engineering.
Nätverka
Keynote: Amy Webb, futurolog
