The 2018 Security Culture Report
Measure to Improve

The result of data collected on more than 20,000 employees over the course of two years, the Security Culture Report 2018: Measure to Improve is the first ever comparison of how security culture evolves over time.
The report focus on three main areas:
- Industry benchmarking
- Language comparison
- Year over year change in security culture
Industry Benchmarks
The 2018 Security Culture Report is the first to group industry sectors based on their ISIC code (International Standard Industrial Classification of All Economic Activities). This means that industries such as banking, financial services and insurance (ISIC K) are covered one benchmark for the financial industry sector.
Language Comparison
The 2018 Security Culture Report is the first report to analyze the security culture of organizations in multiple languages, across Europe, North America and Asia. Large differences demonstrate why it is important to measure security culture across the whole organization (all locations) in order to pinpoint the areas in need of improvement.

Security Culture Change
The result of data collected on more than 20,000 employees over the course of two years, the 2018 Security Culture Report is the first ever comparison of how security culture evolves over time. How does your organization compare to the global standard?
Learn how security culture metrics can be used to indicate the effectiveness of security culture strategy in your organization, and improve it!
Security culture programs designed with an evidence-based approach are significantly more successful. Here’s evidence.
The 2018 benchmark figures from CLTRe reveal that the security culture within the ICT sector is alarmingly poor. Scoring below the global standard on all security culture dimensions except one; Communication is clearly not enough to drive a good security culture.
Good security culture is increasingly mission critical as digitaliation in the sector continues. This year CLTRe share the first global Security Culture Benchmark for the retail and wholesale trade sector.
Compare security culture across languages and locations to identify areas to improve organizational security.
Measuring changes in security culture over time, we show how some industries are improving and where others are not.
In this year’s security culture report, CLTRe analyze the security culture scores of 20,000+ employees, speaking 7 languages and from 4 industry sectors, over 2 years to understand the differences in how they understand, relate to and use security in their organizations.
The Security Culture Report 2018 reveals that security behaviors are poor across most industry sectors in Europe and the Unites States regardless of the employees attitudes towards security. In the largest study on security culture to date, the Norwegian software company CLTRe AS reveals data from more than 20 000 employees, across seven languages.