The Necessary Link Between Security Culture and Data Protection in the European Union

Abstract

Appropriate behavior is indeed a major factor in Security culture, along with the mechanisms available to supervise and sanction, when needed be, wrongful actions. The concept of Security culture was interlinked with Information Security, thus spawning a new concept of Information Security culture, that later evolved to Cybersecurity Culture, which is a concept that has been developed in CSS’s all over Europe and the world. Cybersecurity culture, as opposed to Security culture, is a term that can be applied not only to companies, organizations or institutions, but also to the general public of a given nation or even a region. CSS’s have been the instrument to explain and develop this term.