| ||||
| ||||
![]() Title:Learning from Safety Culture to Optimise Cybersecurity Culture Authors:Claire Blackett Conference:ESREL & SRA-E 2025 Tags:Cybersecurity, Cybersecurity culture, Human-centered, Lessons learned and Safety culture Abstract: The cybersecurity threat landscape continues to evolve, accelerated by recent advancements in Artificial Intelligence capabilities, and major changes within the modern work environment. The ease of access to and use of sophisticated generative AI tools such as ChatGPT create opportunities to create fake audio, video and text that are extremely realistic and difficult to distinguish from human-generated content. At the same time, the digitalisation and decentralisation of the modern workplace, as well as the substantial rise in remote working because of the COVID-19 pandemic, have considerably increased the potential for security breaches. There is growing awareness within the cybersecurity industry that protection against threats depends on more than complex IT infrastructure and tools. People are still considered to be the cause of most cybersecurity breaches, but people may also be the key to building a successful cybersecurity defence. As the threat landscape changes, it has become evident that the most common approaches to address cybersecurity (e.g., awareness training, simulated phishing attacks, requirements for password updates), will not be sufficient. Successful implementation of cybersecurity measures that are sustainable over time requires both a human-centred approach and the adoption of a cybersecurity culture mindset within the organisation. This paper presents a hypothesis about how high hazard industries, such as nuclear power, have faced comparable threats, which led to the widespread adoption of the safety culture concept. The paper considers how organisations could learn from the implementation of safety culture to support adoption of a sustainable, human-centred cybersecurity culture. Learning from Safety Culture to Optimise Cybersecurity Culture ![]() Learning from Safety Culture to Optimise Cybersecurity Culture | ||||
Copyright © 2002 – 2025 EasyChair |