"As an experienced information security consultant managing ISO 27001 compliance projects including the design and delivery of awareness programmes and having worked with two Big-4 consultancy firms in Senior Manager roles, I can appreciate the importance of effecting and embedding behavioural and culture change into security education and awareness programmes to ensure maximum impact and successful delivery with key stakeholder groups.
"During my time working with Marmalade Box on a client assignment, I was impressed with the Security Awareness, Behaviour & Culture (SABC™) methodology that has been developed to achieve positive security behaviours and a security culture. This stands out as an innovative and well thought through and unique approach to influencing security behaviour and fostering an appropriate culture.
"In my experience, messages delivered from a business perspective rather than a security controls perspective should concentrate on the benefits of good behaviour and less on wielding the ‘compliance stick’. SABC™ provides a move to using more creative, communications and marketing expertise to develop effective programmes rather than the sole use of security subject matter expertise. This is a challenge I have seen in many organisations who use an isolated departmental approach in delivery of education, security and awareness programmes.
SABC™ introduces the use of psychologists and organisational behaviours specialists to help identify ‘what works for whom’ to support awareness programme goals and objectives as well as identifying the triggers that bring about behaviour change. As a result, this focuses on tackling what really matters and what will really benefit organisations as opposed to ‘training everyone in everything’.
"In summary, I can fully recommend SABC™ methodology as an approach to be adopted that delivers positive results and effect culture change. It focuses on providing awareness that fits in with the organisational culture and security strategy and provides a robust platform to help develop good behaviours in the workplace."