The growing number of threats and challenges from cyberspace, due to the increasing use of the Internet and mobile applications as never before, requires the implementation of security policies aimed at preserving the information and communication assets of the company. Security is achieved through one part of measures that are technical-technological in nature, and the other part is related to the actions of people in the organization. People are known to be the weakest link, and security culture aims to act on people by adopting certain behaviours, building habits and establishing communication in a way that they can respond to threats from cyberspace. Information security culture is established and maintained through programs that aim to prepare people for current and future challenges from cyberspace. One day, young people will start working, but until that moment, parents, in synergy with school institutions, should direct them so that they accept certain behaviours and norms. In this way, the security culture ensures that their security is preserved from the earliest days, so it is necessary to develop programs at different levels of education that will enable this.