Building a Cybersecurity Culture in Organizations - Practical Guide

Our review of Building a Cybersecurity Culture in Organizations finds it a practical, human-centered guide for leaders and security practitioners who want to move beyond technical fixes. Written with a clear psychosocial viewpoint, this book argues that improving security starts with the relationships between people and technology; the bottom line is that teams and managers looking to change attitudes and behaviours will find concrete frameworks and real-world insight that translate into workplace action. This review highlights why the book is useful for organizational change and where its scope is limited.

Key Features

• Psychosocial perspective: Explains how attitudes, norms and social dynamics influence employee behaviour and therefore security outcomes.
• Practice-oriented guidance: Offers practical solutions and approaches that can be applied by managers and security teams to strengthen everyday practices.
• Human-technology focus: Reframes cybersecurity as a people-first concern, helping readers connect human factors with digital controls.
• Comprehensive landscape analysis: Surveys current cyberthreat trends and organizational vulnerabilities to inform targeted interventions.
• Experience-based examples: Draws on the author's personal experience alongside literature to illustrate realistic challenges and responses.

Who It's For

This book is best suited to security managers, HR leaders, compliance officers and organizational change practitioners who need a structured, human-centered way to build safer behaviour across teams. It is valuable for those responsible for training, policy design or awareness programs and who want frameworks grounded in psychosocial research.

Readers seeking a deep technical manual on firewalls, encryption or system architecture should look elsewhere, since the book focuses on culture, attitudes and behaviour rather than low-level technical configuration.

Pros & Cons

Pros

• Clear emphasis on human factors makes it actionable for managers designing awareness and behaviour programs.
• Practice-oriented approach provides concrete steps rather than only theory, aiding implementation.
• Combines literature review with the author's real-world experience for credible, grounded advice.

Cons

• Not a technical reference, so readers needing hands-on IT procedures will need supplemental resources.

Specifications

Title	Building a Cybersecurity Culture in Organizations
Series	Studies in Systems, Decision and Control, 284
Author / Brand	Corradini
Focus	Psychosocial perspective on cybersecurity
Approach	Practice-oriented solutions for behaviour and attitudes
Intended audience	Managers, security practitioners, organizational change professionals

Our Verdict

For organizations that recognize security as a cultural challenge, this book is a persuasive and useful roadmap. It delivers practical guidance rooted in psychosocial theory and experience, making it good value for leaders intent on improving employee behaviour and reducing human-driven risk. Those needing technical and configuration details should pair it with IT-focused references.

Frequently Asked Questions

Does this book teach technical cybersecurity skills?
Answer. No, it focuses on culture, human behaviour and organisational solutions rather than hands-on technical procedures.

Who benefits most from reading it?
Answer. Security managers, HR and organisational change leaders who design training, policy and awareness programs will gain the most practical value.

Is the content research based or anecdotal?
Answer. The book blends literature review with the author's personal experience to provide grounded, actionable recommendations.