The 2018 benchmark figures from CLTRe reveal that the security culture within the ICT sector is alarmingly poor. Scoring below the global standard on all security culture dimensions except one; Communication is clearly not enough to drive a good security culture.