The security culture programme that this publication has described invests substantially in the awareness, training, environmental design, and cultural development that creates the conditions for good security behaviour across the workforce population. This investment is grounded in the human-centric understanding that the vast majority of security policy non-compliance results from the knowledge gaps, cognitive limitations, environmental barriers, and motivational deficits that the programme addresses through the education, design, and cultural interventions that the preceding sections have established. The governance response to this understanding is the programme investment that removes the barriers to compliance rather than the punitive framework that treats non-compliance as the culpable failure requiring the consequence that deters future occurrence.
This investment orientation does not, however, eliminate the governance requirement for a clear and consistently applied accountability framework whose existence performs three essential functions that the purely supportive programme approach cannot achieve alone. The first is the clear communication of the standard that the organisation genuinely expects to be met, whose absence creates the ambiguity that allows individuals to rationalise non-compliance as the acceptable professional judgement rather than the policy deviation whose correction the organisation requires. The second is the fair and proportionate response to the persistent non-compliance that the supportive programme has genuinely attempted to address but that the individual has continued despite the assistance provided, whose absence creates the accountability vacuum that the workforce’s cultural norm formation interprets as signalling that the security standard is voluntary rather than required. The third is the legal governance that the employment relationship creates, whose requirements the disciplinary framework must reflect with the care that the regulatory environment, the employment law jurisdiction, and the individual’s rights together demand.
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
