Cybersecurity is no longer just about technology it is ultimately about organizational change. Change in not only how people think about security but what they prioritize and how they act, from the Board of Directors on down. Organizational change is a field of management study that enables organizations to analyze, plan, and then improve their operations and structures by focusing on people and culture. This presentation is a highlights version of our SANS MGT521 course that will teach leaders how to leverage the principles of organizational change, enabling them to develop, maintain and measure a security driven culture.