Security Culture in the Banking and Financial Services Sector

The Banking and Financial Services Sector has to pay particular attention to risk, control and compliance. The CLTRe Toolkit is directly applicable to assess, build and improve Security Culture in the Banking and Financial Services Sector.
Industry specific benchmarks

The CLTRe Toolkit provides assessments which are specific to the Banking and Financial Services Sector, enabling you to measure the culture and benchmark your organisation against others in your industry. Your sector is unique, the assessments are too!

Actionable Items for Improvement

Improving Security Culture is the key to building a resilient organisation. The CLTRe Toolkit provides you, the CISO, with actionable items based on the Security Culture Framework to improve your culture over time. In the Banking and Financial Services Sector, special attention is paid to the risk function, and the Security Culture action items target the needs of the sector.

Auditors require metrics

The CLTRe Toolkit is able to assess Security Culture from individual levels all the way to the top tier of the organisation, providing clear metrics on teams, departments and business units. Compare the units across the organisation to provide relevant metrics on improvements, status and the effect of measures taken to improve Security Culture. All of this information can be brought together to provide clear metrics for auditing purposes.


The assessments are created using social scientific principles to create a quick, easy-to-use assessment that measures Security Culture. Each assessment item is developed together with our research partners to ensure the highest degree of scientific validity.

Compliance matters

The CLTRe Toolkit helps you to document the Security Culture, and the changes over time. Easy reporting allows you to see the results of activities and the cultural impact. This gives you real compliance, not merely tick-box compliance!

GDPR, the upcoming EU General Data Protection Regulation, will require organisations to document the effectiveness of both technical and organisational security measures. The CLTRe Toolkit offers deep insights into the changes of Security Culture, making it easy to track effectiveness of security measures taken.

Key Properties of the CLTRe Toolkit

Simplicity of use is combined with a fresh approach!

Based on the Security Culture Framework
The CLTRe Toolkit is built on top of the free and open Security Culture Framework, implementing the de-facto standard of building and maintaining security culture today.

Social Science Tradition
The CLTRe Toolkit is designed using social science methodologies, applying more than a century worth of social scientific tradition to measuring culture.

Low Friction
The CLTRe Toolkit is designed to generate as little friction in the organisation as possible making it highly effective and low-cost.

Used by others
The CLTRe Toolkit has a strong user base in the bank and finance industry. Contact us to discuss how your organisation can benefit from becoming our customer.

Special Features

GDPR Ready
The CLTRe Toolkit allows you to measure the effectiveness of technical and organisational measures, as required by GDPR Article 32.

Global Community
The CLTRe Community organize user-groups and conferences to share experiences, and to learn how to build and maintain security culture with the Security Culture Framework.

Scientifically Sound
The CLTRe Toolkit is developed with some of the leading research universities and centers in Europe, ensuring a scientifically sound tool.

People Centric
Security Culture is all about people. The CLTRe Toolkit measure culture using human readable assessments.

A key to security culture is to easily communicate progress and status. The CLTRe Toolkit Reports are made to quickly demonstrate the current status and trends.

Always Available, No Installation
A Software-as-a-Service, the CLTRe Toolkit is available to use wherever you and your users are.

The CLTRe Tookit is designed to be language and culture agnostic, an important feature for multinational corporations.

Powerful to the End
Measuring culture is an on-going process, where the true value becomes visible true changes and trends over time.