Featured
Once Upon a Training Session

Stanford found people remember stories twelve times better than statistics. So why does your security training read like a policy document?

Amy Stokes-Waters
Read More →

Design Thinking
Once Upon a Training Session

Stanford found people remember stories twelve times better than statistics. So why does your security training read like a policy document?
Inside the Lab
The Argument is Now a Product

There’s a version of this post that reads like a press release. That’s not this one….
Design Thinking
The Behaviour Formula

Why security programmes optimise one variable in an equation with three. The Behaviour Formula explains how engagement, awareness and culture combine into instinctive behaviour.

The Archive

All Articles

You Want Instinct. You’re Funding Awareness.

The evidence is no longer ambiguous: annual awareness training barely changes behaviour. Here’s why organisations keep funding it anyway.

Human Systems

What The Brain Actually Responds To

Your training is fighting how memory works. Six things get past the brain’s bouncer, and most security modules use none of them.

Analysis

The Engagement Paradox

Organisations want behaviour change, then fund the formats least likely to deliver it. That’s the engagement paradox, and why your dashboard lies.

Analysis

The Human Element Just Went Up

Verizon’s 2026 DBIR puts the human element behind 62% of breaches, up from 60%. Another year of awareness training, and the number went the wrong way. Here’s why.

4 minute read