Скачать или смотреть Creating a Culture of Compliance

In this video, we examine the crucial role of organizational culture in promoting compliance across cybersecurity and risk management domains. Based on Schein’s organizational culture model and current NIST guidance, the paper analyzes how shared values, assumptions, and leadership behaviors shape security outcomes.

This video explores key challenges, including the tick-box mentality, compliance fatigue, policy-practice decoupling, and resistance to change. It also integrates psychological, organizational, and sociological theories—including cognitive load, neutralization, and deterrence theories—to explain noncompliant behavior.

Backed by cutting-edge research and real-world frameworks, it offers strategic solutions including:

✅ Role-based automation and ethical leadership
✅ Participatory governance and zero-trust architecture
✅ Scenario-based training and psychologically safe feedback channels

📘 Whether you're a cybersecurity professional, compliance officer, or organizational leader, this discussion offers practical insights and tools to deeply embed compliance into your organization’s cultural fabric.

===============
Table of Contents:

00:00 - Introductiion
01:55 - Culture's Role in Compliance
02:45 - Artifacts
03:04 - Espoused Values
03:30 - Underlying Assumptions
04:49 - Challenges to Achieving a Compliant Culture
05:21 - Tick-box Culture
06:04 - Decoupling of Policies and Practices
06:40 - Compliance Fatigue
07:14 - Cultural Barriers
07:54 - Resistance to change
08:28 - Lack of Leadership Commitment
09:09 - Perceived Ineffectiveness
09:45 - Inadequate Training and Awareness
10:17 - Hierarchical Communication Structures
10:55 - Overemphasis on Punitive Measures
11:39 - Theories Explaining Noncompliant Behavio
12:32 - Psychological Contract Theory
18:00 - Strategies for Managing Compliance Behavior

===============
Script Study Guide and References
http://dx.doi.org/10.13140/RG.2.2.305...
===============