The University of SydneyPage 9Security Culture–Security culture is the totality of patterns of behavior that come together to ensure protection of information resources of a firm–Security culture can only be sustained if non-verbal, technical, and verbal aspects are clearly understood–Weak security culture results in•The information system do not serve the purpose it was originally conceived for•A general discordance between the rules imposed by the information systems and the corporate objectives