In “Shaping Security: The Role of Leadership in Information Security and Compliance,” I explore the relationship between leadership and information security policy and compliance within organizations. I highlight the critical role of leadership in shaping not only information security strategies, but also the behaviors, awareness, and organizational culture that ultimately determine the success of those strategies.
Leadership and information security are central to my academic pursuits and achieving my long-term professional goals. I chose to include this artifact because it represents a meaningful intersection between the human and technical elements of information security, as well as..
Despite my professional experience, I still find myself astonished by how often human behavior, rather than technology, is the weakest link in information security. Through my research and writing this paper, I gained valuable insight for how a security-conscious organizational culture can be cultivated through proactive education and, more importantly, leading by example.