How to Build a Positive Cybersecurity Culture in 3 Steps>
Immersive Labs
Foster a “just culture” The concept of just culture within organizations emphasizes understanding the range of factors that can influence outcomes in the workplace, focusing on learning from incidents and the complexities that led to them rather than simply assigning blame. The concept demonstrates a shift from focusing on WHO caused an incident to WHY did the incident happen.

Promote understanding Developing positive security cultures focuses on learning from incidents, openly discussing and identifying areas of concern, and effectively reporting incidents where they do occur. This is vital to enable true resilience in a system.

Implement people-centric cybersecurity At Immersive Labs, we support organizations in accessing the data they need to identify potential risk areas. Although this may be most visible in ‘insecure’ behaviors at the individual level, it’s vital that this information supports a wider positive conversation on what may be contributing to these outcomes and how they can best be addressed.
Link: https://www.immersivelabs.com/blog/how-to-build-a-positive-cybersecurity-culture-in-3-steps/