How to Build an Organization-Wide Security Culture

Security culture isn’t just a poster on the wall. It’s a strategy where you define your core values and turn them into action, repeating them with every person in your organization until they become an enterprise-wide habit. In this #StrategicCISOs episode, Lori Kevin, VP, Security & Compliance for IMO Health, joins Sravish for a candid, practical conversation on turning security awareness into real behavior change through leadership buy-in and a cross-functional security champions program.

Agenda

1. Build on a strong foundation: What are the core values of a security program, and how do you identify them? 
2. How do you hire an inclusive security team with shared values and diverse skills to promote an organization-wide security culture?
3. How to create security champions across the organization and executive leadership so the culture sticks and scales? 
4. How do you engage leadership and employees with reporting, communication, and community-building activities?
5. What are the key lessons learned (even from mistakes) and results? 
6. What’s next: strategic priorities for 2026
7. Live Q&A

What you’ll learn

• Practical ways to get executive support and build a recurring rhythm with the leadership team and audit committee. 
• Key culture levers: hiring signals, onboarding, role-based messaging, and engagement tactics.
• How to move beyond ‘security is everyone’s responsibility’ and tailor security messaging. 
• Make awareness stick. Shift from annual training to muscle memory so behaviors improve over time, not just on test day.
• A starter blueprint for a security champions program that scales. Learn from Lori’s experience building a cross-functional network that listens and advocates for security with every team.
• Simple ways to educate teams on the behind-the-scenes controls and how security protects the business.

Who should attend

• CISOs and security leaders who want real adoption, not just policies
• Security awareness and training owners focused on behavior change
• IT, engineering, and ops leaders who partner closely with security
• Any security-minded leader