Use the Compare Business Units report to visualise security culture


Security culture that has been measured with the CLTRe Discover can be visualised with the CLTRe Insights module. The CLTRe Insights module provides you with deep insights into the security culture of your organisation. Today, I will share a useful report that allow you to compare the scores across business units.

Security culture visualised

Measuring security culture can provide you with lots of data, data that needs analysis and visualisation to make it easy to apply, and to find meaning.

The CLTRe Discover module collects data from employees throughout the organisation, using the CLTRe Toolkit methodology and metrics instrument. The data itself provides little value if it is not made available to the CISO and her team. The CLTRe Insights module provide reports that the CISO can use to understand where in the organisation security culture is adequate, and where it would be necessary with improvements.

One way to find areas to improve, is to use the Compare Business Units report. In this post, I will share tips on how to use the report to find the information you need.

Finding the report

The report is found within the CLTRe Insights menu, where it is appropriately named “Compare Units”. Clicking on the link, opens the report on the right hand side.

Compare reports

Using the report

The report opens with all business units selected by default.

Tip: a business unit is a way to segment the employee data based on where in the organisation they belong. A business unit is the top-most level, and can include departments and teams.

You can easily remove units you do not want to use in your comparison by clicking the trashcan.

When you have selected the business units to compare, you can view the data in a number of ways:

  • Table view
  • Radar Diagram View
  • Broken down on each of the seven security culture dimensions

Table view

The table view provide you with data on each business unit. The table show number of employees in the unit, how many started and completed the CLTRe Discover, and then each of the seven dimensions scores are show. To the right, the total score for the unit is shown.

Using the table view is a great way to understand exactly how each business unit differ from another unit.

Radar Diagram View

The radar diagram show the same data as the table view, visualised as a radar diagram. Each of the dimensions of security culture is shown as a 0-100 scale on the radar, and then each business unit is given a color and is visualised on the radar.

Security culture radar

You can turn on/off the different layers by clicking on the legend. Note: Turning on / off only is reflected on the radar, giving you the option to make it easier to digest the data.

The radar diagram is often used to visually discover where and how business units differ – it is a quick way to find differences where the CISO may need to pay special attention.

Seven Dimensions View

Below the radar diagram, the report show the scores for each selected business unit, spread on the seven different security culture dimensions. This part of the report give you a brief reminder of what each dimension is, and show the data for that dimension only.

The dimension view is often used to gain a better understanding of a particular dimensions score, and how it is spread across the business units.

Questions? Comments?

Feel free to engage in the Security Culture Framework forum!

See it for yourself!

You can book a demo to see the CLTRe Toolkit SaaS with your own eyes. Our demo team is flexible with their hours, and are happy to discuss how the CLTRe Toolkit can provide you and your organisation deep insights.