Advanced Security Culture

What is Security Culture?

Security culture is a set of norms, beliefs, values, attitudes and assumptions that are inherent in the daily operation of an organisation and are reflected by the actions and behaviours of all entities and personnel within the organisation.

Security should be everyone’s responsibility – from the ground up. An effective security culture is about: recognising that effective security is critical to business success; establishing an appreciation of positive security practices among employees; aligning security to core business goals; and articulating security as a core value rather than as an obligation or a burdensome expense.

Course Overview

The Advanced Security Culture course aims to elevate and refine the security practices within organisations that have already established a foundational security culture.

This course is designed to drive continuous improvement by enhancing participants’ expertise, deepening their understanding of advanced security principles, and reflecting on successes and areas for improvement.

Delegates will thoroughly explore how to align security culture with their national and organisational cultures. They will develop key performance indicators, explore cybersecurity culture (aligned to ICAO Cybersecurity Action Plan), and apply the start-stop-continue method to identify actionable improvements.

Who should attend?

This course is suitable for individuals at a supervisory/management level engaged in aviation security around the world, from National Aviation Authorities, government and industry.

Key topics

• Delegates will learn about the importance of security culture by examining previous aviation security incidents in order to give real, practical understanding of why a positive security culture is important.

• Delegates will discuss the elements that make up a security culture and explore how the extensive work that has been done in the aviation safety sphere can benefit aviation security.

• The course will provide delegates with practical tools to both benchmark current security culture within their organisations and techniques and best practices for enhancing and maintaining a positive security culture.

Course objectives

On completing the course, delegates will demonstrate an understanding of the following:

• The Advanced Security Culture course is a virtual learning experience designed to review the principles of security culture and reflect on activities already undertaken by the organisation. Delegates will build upon existing security practices, aligning them with both national and organisational cultures. Using innovative and interactive tools, participants will explore national culture and determine how best to align their security culture accordingly. They will present security culture outcomes to date using ICAO Discussion Cards, facilitating comprehensive reviews and discussions.

• A key component of the course involves developing continuous improvement plans. Delegates will create actionable strategies for ongoing enhancement using the stop-start-continue method, ensuring that progress is sustained over time. This method allows for a systematic reflection on what practices to maintain, which to cease, and new initiatives to commence, fostering an environment of continuous improvement.

• Participants will also analyse various tools and techniques suitable for enhancing their organisation’s security culture. By evaluating and implementing these tools, they will bolster their security practices, making them more robust and effective. The course will provide insights into Security Management Systems (SeMS) and their integration with other management systems, creating a cohesive and comprehensive security framework.

• Understanding the principles of cybersecurity culture (aligned to ICAO Cybersecurity Action Plan) is another aspect of the course. Delegates will learn and apply foundational principles to fortify their organisation’s overall security posture. Furthermore, they will develop key performance indicators (KPIs) to measure, monitor, and continuously improve the effectiveness of their security culture. Through these KPIs, organisations can ensure that their security practices remain aligned with their goals and are adaptable to emerging threats and challenges.