Core value: just culture
Just culture means that mistakes are opportunities to learn, not automatic reasons to punish. That is not a plea for non-binding. It is actually a way to better organize responsibility. An organization that only looks for guilty parties learns less than an organization that investigates why an error could occur. This is crucial in digital security. Incidents rarely arise from one action by one person. Work pressure, unclear procedures, inadequate tooling, missing training, supplier dependence or poor design often play a role. If the analysis stops at an employee’s last click, the real causes remain.
Read more