A culture is not inherited, it is a learned process which implies that we can establish and shape our own information security culture within an organisation. When elements of culture have been proven effective such as best work practices, they can provide solutions to social problems of work routines or everyday life. Once the cultural elements have become dominant or are accepted, these shared elements are transmitted to others. However, an establishment of an appropriate information security culture needs participation from all employees. In order to ease on such establishment, this book...