Encouraging Security Culture through a Participatory Policy Project

Tuesday, October 22, 2024 | 11:30AM–12:15PM CT | EDUCAUSE Commons, Cybersecurity Central, Learn & Design Lab
Session Type: Breakout Session
Delivery Format: Learn and Design Lab
Our InfoSec governance mantras are, “Keep Information Security Simple” (KISS), and “communicate, don’t alienate.” Join us to learn about turning policies and standards into a channel for culture change at an R1 university and medical school. In a recent multiyear project, we tapped into our university’s collaborative spirit, working with multiple task forces and committees of subject matter experts to overhaul and expand the entire Information Security Policy library. Their participation improved the final product and encouraged a widespread sense of ownership. We further promoted a security culture by using a friendly, guidance-based approach to communicating the policies and leveraging trainings and a monthly newsletter to enculturate policy objectives.

Presenters

  • Christina Pomianek-Smith

    Information Security Analyst II, Washington University in St. Louis

  • David Puzder

    Security Awareness, Behavior, & Culture Analyst II, Washington University in St. Louis

  • Madeline Quigley

    Cybersecurity Awareness, Behavior and Culture Analyst II, Washington University in St. Louis

Resources & Downloads

  • Encouraging Security Culture Through a Participatory Policy Project Handout

    Updated on 9/27/2026

  • Encouraging Security Culture Through a Participatory Policy Project Presentation

    Updated on 9/27/2026