Cyber security culture should be one of the many security controls to support a business reach its objectives. A security culture can be defined by the shared values, beliefs, attitudes, and behaviours of the employee's towards cyber security. It should also extend to engagements with vendors and stakeholders of the business. The cyber security culture is all about people, but are you letting everyone in? This talk will discuss how diversity and inclusion should be included in developing cyber security awareness right through to the management of personnel during an incident. How do you engage and support your employee's to join the cyber culture club to understand more about business resilience and less karma chameleon.