It consists of a simple matrix of 10 different aspects of cyber security culture, each having six different descriptions of how an organization addresses that aspect. The descriptors range from outright hostility to cyber security, to totally embracing it. Your choices will determine just how supportive your organization's cyber security culture is to your efforts. The simple scoring table provides a summary assessment.