The security culture that the programme builds through its ongoing awareness, training, and cultural development activities must be established from the first day of every new employee’s organisational experience rather than introduced retrospectively through the remediation of security behaviours that have already been formed without the programme’s cultural influence. Onboarding is the most important single security culture investment the organisation makes in each new employee, because the cultural expectations, security norms, and professional identity orientation that onboarding establishes will shape the individual’s security behaviour more durably than any subsequent training intervention can reshape.
The security culture research consistently demonstrates that the attitudes and habits formed in the first weeks of employment persist into the long-term operational behaviour that the security programme must sustain, because the psychological process of professional identity formation that onboarding initiates creates the frame through which subsequent security requirements are interpreted as either the natural expression of the professional standards the individual has adopted or the external impositions on the professional identity they have formed. The security programme that makes security a central component of the professional identity that onboarding establishes will achieve the intrinsic motivation that the culture change literature consistently identifies as the most durable driver of sustained security behaviour.
Security Onboarding: Principles and Governance #
The ISO must govern the security onboarding component with the same strategic importance that the programme’s ongoing awareness activities receive, recognising that the investment in onboarding quality compounds across every new employee’s tenure with the organisation in a way that the equivalent investment in remedial awareness for the poorly onboarded workforce cannot replicate.
Early Integration as Cultural Signal #
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
