Abstract This paper identifies and explains five key initiatives that three Australian organizations have implemented to improve their respective cyber security cultures. The five key initiatives are: identifying key cyber security behaviors, establishing a 'cyber security champion' network, developing a brand for the cyber team, building a cyber security hub, and aligning security awareness activities with internal and external campaigns. These key initiatives have helped organizations exceed minimal standards-compliance to create functional cyber security cultures. This paper discusses why these initiatives have been effective and provides practical guidance on their integration into organizational security program

中文翻译：

---

发展网络安全文化以影响员工行为：实践视角

摘要 本文确定并解释了三个澳大利亚组织为改善各自网络安全文化而实施的五项关键举措。这五项关键举措是：识别关键网络安全行为、建立“网络安全冠军”网络、为网络团队打造品牌、建立网络安全中心以及将安全意识活动与内部和外部活动相结合。这些关键举措帮助组织超越了最低标准合规性，以创建功能性网络安全文化。本文讨论了为什么这些举措是有效的，并提供了将它们整合到组织安全计划中的实用指南