Ensuring that your team behaves in a It’s important that you walk the walk and security-conscious way is as much a part of don’t belittle security matters. Employees your responsibilities as monitoring their need to see you employ good security performance or looking after their welfare. practice in everything you do. So take the lead and behave in the way you expect your 2. KNOW YOUR STAFF staff to behave. Understanding the motivations and concerns of your team will help you recognise when 8. DON’T WORRY, DON’T PANIC there’s a problem and address any issues. Ensure you know how to handle a security incident. Try and be confident when an- 3. EXPLAIN THE THREAT swering questions about security concerns Don’t assume everyone knows why secu- and always show you’re taking the situa- rity is important. Help them understand tion seriously. the potential threats they face, the value of your organisation’s assets and the con- 9. IT’S A TWO-WAY STREET sequences of a breach. Gather feedback from staff – do they know the threats, and the behaviour expected of 4. TELL THEM WHAT YOU EXPECT them? Do they have security-related ideas OF THEM that you and others could try? Check that employees understand and can follow your organisation’s security 10. IT’S ALWAYS A LEARNING procedures. Where relevant, don’t leave CURVE briefings or training to another team – Security is an ever-evolving issue. take charge of this yourself. Staff should be encouraged to own up to mistakes. Learning about and 5. MAKE IT FEEL REAL understanding the implications of real-life The best way to get someone to do examples can help all of the team. something is to show them how it affects them personally. Use case studies and 11. MANAGE ACCESS tangible examples to keep briefings You may need help from IT on this. Keep interesting and engaging. a record of employees’ access rights and remember to close down that access when 6. KEEP KNOWLEDGE TOPPED UP they move on. Security measures can change regularly in response to evolving threats. In addition, 12. AND LASTLY… staff working in new areas or new systems Remember that while it’s important you may need a top-up security briefing. Keep keep your team aware of security matters, your staff updated on changes to security maintaining security is ultimately down to policies and ensure they receive a security the choices that individuals make. briefing when they’re given access to new systems, visit new sites or have been issued SECURITY IS EVERYONE’S BUSINESS. with new devices.