Δείκτης Ωριμότητας Πολιτισμού Κυβερνοασφάλειας (CCMI): Αξιολόγηση μέσα από τη ματιά του ατόμου

Abstract

As cybersecurity threats become increasingly complex and pervasive, organizations must look beyond technical controls and compliance frameworks to build resilient security postures. Central to this evolution is the cultivation of a mature cybersecurity culture—one that empowers individuals, aligns organizational values with secure behaviors, and adapts to the realities of hybrid work and digital wellbeing. This study introduces the Cybersecurity Culture Maturity Index (CCMI), a structured, individual-centric instrument designed to assess cybersecurity culture maturity across five key pillars: Leadership & Trust, HRM Involvement, Digital Wellbeing, Security Awareness & Behavior, and Hybrid Work Integration. Drawing on a sample of 100 professionals from diverse sectors and roles, the research applies statistical techniques—including descriptive analysis, correlation matrices, ANOVA, principal component analysis, and cluster segmentation—to uncover patterns, interdependencies, and maturity profiles. Findings reveal that cybersecurity culture is a coherent, multidimensional construct, with strong interrelationships among its components and significant variation across demographic and organizational contexts. The study further proposes the Cybersecurity Culture Maturity Framework (CCMF), a practical model that translates CCMI results into four maturity levels, offering organizations a strategic roadmap for benchmarking, targeted interventions, and continuous improvement. By positioning individual perception as a strategic asset, this research contributes to the evolving discourse on human-centered cybersecurity. It provides both theoretical insights and actionable tools for organizations seeking to foster inclusive, adaptive, and resilient security cultures in an increasingly hybrid and digitally intensive world.