CLTRe AS, Bleikerveien 17, 1387 Asker, Norway

Security Culture in the Healthcare Sector

The Healthcare sector faces a unique set of security challenges. Ensuring patient data is secure, combined with high levels of regulatory compliance requirements can be tough. This is especially true when set in the context of constrained budgets and disparate, siloed systems. With these very specific challenges in mind the CLTRe Toolkit can be used to design, assess, build and improve Security Culture in the Healthcare sector.
Actionable Items for Improvement

It is vital to have a robust Security Culture in order to build a resilient organisation. The CLTRe Toolkit provides you, the CISO, with actionable items to improve your culture over time. In the Healthcare sector, special attention is paid to the patient confidentiality and data security function. The Security Culture action items within the CLTRe Toolkit can specifically target these needs.

Security Culture Across Disparate Locations and Systems

The CLTRe Toolkit is able to assess security culture from individual levels all the way to the top tier of the organisation, providing clear metrics on teams, departments and business units. Compare the units across the organisation to provide relevant metrics on improvements, status and the effect of measures taken to improve security culture. This is particularly useful in the Healthcare sector where there are often many different teams and systems spread across many locations.


The assessments are created using social scientific principles to create a quick, easy-to-use assessment that measures security culture. Each assessment item is developed together with our research partners to ensure the highest degree of scientific validity.

Compliance matters

The CLTRe Toolkit helps you to document the Security Culture, and the changes over time. Easy reporting allows you to see the results of activities and the cultural impact. This gives you real compliance, not merely tick-box compliance!

GDPR, the upcoming EU General Data Protection Regulation, will require organisations to document the effectiveness of both technical and organisational security measures. The CLTRe Toolkit offers deep insights into the changes of Security Culture, making it easy to track effectiveness of security measures taken.

Key Properties of the CLTRe Toolkit

Simplicity of use is combined with a fresh approach!

Based on the Security Culture Framework
The CLTRe Toolkit is built on top of the free and open Security Culture Framework, implementing the de-facto standard of building and maintaining security culture today.

Social Science Tradition
The CLTRe Toolkit is designed using social science methodologies, applying more than a century worth of social scientific tradition to measuring culture.

Low Friction
The CLTRe Toolkit is designed to generate as little friction in the organisation as possible making it highly effective and low-cost.

Used by others
The CLTRe Toolkit has a strong user base in the bank and finance industry. Contact us to discuss how your organisation can benefit from becoming our customer.

Special Features

GDPR Ready
The CLTRe Toolkit allows you to measure the effectiveness of technical and organisational measures, as required by GDPR Article 32.

Global Community
The CLTRe Community organize user-groups and conferences to share experiences, and to learn how to build and maintain security culture with the Security Culture Framework.

Scientifically Sound
The CLTRe Toolkit is developed with some of the leading research universities and centers in Europe, ensuring a scientifically sound tool.

People Centric
Security Culture is all about people. The CLTRe Toolkit measure culture using human readable assessments.

A key to security culture is to easily communicate progress and status. The CLTRe Toolkit Reports are made to quickly demonstrate the current status and trends.

Always Available, No Installation
A Software-as-a-Service, the CLTRe Toolkit is available to use wherever you and your users are.

The CLTRe Tookit is designed to be language and culture agnostic, an important feature for multinational corporations.

Powerful to the End
Measuring culture is an on-going process, where the true value becomes visible true changes and trends over time.