Culture Scan is a scientifically grounded questionnaire tool designed to measure an organization's security culture by assessing employee attitudes, knowledge, social norms, and behaviors related to information security, privacy, and compliance. The tool is based on the Theory of Planned Behavior (developed by psychologist Icek Ajzen) and has been validated through collaboration with the information security and privacy research community over a period of 10 years. The survey is anonymous by design (no cookies or tracking), device-agnostic, and takes 8–10 minutes to complete. It measures employee perspectives on security and privacy from multiple viewpoints, including those of colleagues, supervisors, and executives. Deliverables vary by package tier: - All packages: An extensive PDF report with scores at question and concept level, segmented by team, supervisor role, or other demographic attributes, with general improvement advice. - Plus package and above: An infographic summarizing key results for employees, with concrete takeaways and a call to action. - Pro package and above: A presentation by a social psychologist comparing group results, identifying hidden behavioral risks, and providing concrete action points. The standard implementation timeline is six weeks from intake to deliverables. Results are intended to inform learning recommendations, leadership sessions, communication campaigns, and simulation focus areas. The tool supports stakeholder reporting and ROI demonstration for security awareness programs.