Research · Programme

Security Culture

Developing and testing a security climate instrument for organisational use.

Core42 × Humanitex · Instrument in development

In brief: Core42 and Humanitex are developing a Security Climate Scale (SCS). The programme draws on safety climate research and proposes expert review followed by organisational pilot testing. Validation results are not yet available.

Why this research matters

Audits and incident records tell only part of the story. Staff perceptions of leadership, reporting and shared responsibilities can help explain how security arrangements work in practice.

There are already resources for examining security culture, including the NPSA Security Culture Tool. This programme investigates a complementary approach to measuring security climate.

What we’re doing

The proposed development process has two stages: expert review of the constructs and questionnaire items, followed by organisational pilot testing. Pilot analysis would examine the scale’s structure, consistency and relationship with relevant security behaviours.

The methodological starting point is NOSACQ-50, a safety climate questionnaire with 50 items across seven dimensions. Its validation in safety contexts does not transfer automatically to an adapted security instrument.

The Security Climate Scale

The intended output is a tested instrument that could support organisational discussion and track change over time. Its dimensions, interpretation and suitability for different organisations depend on the research results. It is not currently offered here as a validated diagnostic or a predictor of incident risk.

Publication

Research outputs and validation findings will be shared as they become available. The programme is in development; no completed SCS validation study is linked on this page.

FAQ

Frequently asked questions

Why is security culture difficult to measure in organisations?

Security culture concerns shared expectations and behaviours that are not fully captured by incident counts or compliance audits. Existing resources, including the NPSA Security Culture Tool, combine surveys and workshops. Core42 and Humanitex are investigating whether an adapted climate scale can add a useful, tested measure for physical security contexts.

What is the Security Climate Scale?

The Security Climate Scale (SCS) is an instrument in development by Core42 and Humanitex, informed by the NOSACQ-50 safety climate framework. Expert review and organisational pilot testing are planned stages. The SCS has not yet been presented here as a validated instrument; adapting a validated safety questionnaire does not establish validity for security.

How does security culture affect organisational security outcomes?

Shared expectations can influence reporting, challenge behaviour and the use of security procedures. Surveys, interviews and observation can help an organisation examine those conditions alongside operational evidence. Whether the proposed SCS reliably measures them, and how its scores relate to security behaviour, remains to be tested.

Interested in piloting the Security Climate Scale?

Get in touch if your organisation could host a pilot of the scale, contribute to the expert panel, or use the research as it develops.