Vendor acquires firm that helps organizations assess, build, maintain, and measure overall security posture
Security awareness and anti-phishing specialist KnowBe4 this week snapped up a Norwegian security firm best known for its security culture framework. The purchase of CLTRe (pronounced “culture”) gives KnowBe4 increased presence in the European market, as well as added capabilities around measuring and maintaining organizational security and compliance posture.
The Lowdown: For now, CLTRe will operate as an independent subsidiary of KnowBe4, and continue to service customers globally, officials said. CLTRe’s Toolkit and Security Culture Framework will be available to all KnowBe4 customers later this year. The terms of the deal were not disclosed.
The Details: CLTRe’s eponymous Toolkit and its Security Culture Framework work together as a research-driven measurement platform to help organizations collect intelligence on their security culture and how it may be changing over time. The platform measures seven dimensions of security culture: behavior, responsibilities, cognition, norms, compliance, communication, and attitudes.
Background: Founded in 2015, CLTRe has offices in Asker, Norway, and Newark, New Jersey.
The Buzz: “From my former life as a Gartner analyst, I have a strong appreciation for evidence over opinion, which is what CLTRe gives to its clients in the form of a data-driven examination of their security culture,” said Perry Carpenter, chief evangelist and strategy officer at KnowBe4. “To change user behavior and address awareness, we have to understand and change security culture. CLTRe gives organizations the tools to understand where they are today so they can get to where they want to go tomorrow.”
“Our work with CLTRe has been important to helping us gauge the maturity of our security culture over time. Now that CLTRe is part of KnowBe4, we have a very real way to advance the maturity of our program and test the knowledge of our user’s understanding via KnowBe4’s fresh content, engaging trainings, and simulated phishing tests,” said Espen Otterstad, CISO at CLTRe customer Abax. “The combination of CLTRe and KnowBe4 means that we can improve security within our organization through training and phishing tests, and manage our security culture program while proving ROI.”
“KnowBe4 is a leader in innovation and has a wonderful track record for growing quickly but with a very specific focus on improving security at the human level,” said CLTRe CEO Kai Roer. “This is a natural fit for our evidence-based analytics and measurement tools, as KnowBe4 customers will now be able to measure their security cultures, benchmark against their industry sectors, and pinpoint exactly what kind of security culture they have. With KnowBe4 and CLTRe, organizations can gain true insight into their security culture, improve their security with pinpoint accuracy, report their progress to their board of directors, and educate their users to make smarter security decisions.”
“Today’s announcement brings KnowBe4 very valuable tools to help our customers measure what matters – their security culture – so they can make decisions about how to improve,” said Stu Sjouwerman, CEO of KnowBe4. “We’re excited to welcome Kai and the CLTRe team to the KnowBe4 family and to enhance our European presence while supporting more global customers.”