Managed Cyber Awareness & Behaviour

Many attempts at behaviour change rest on the assumption that humans are rational. ‘As long as people are aware of the risks of their unsafe behaviour, they will automatically change that behaviour’, is the reasoning behind this. But as is the case of other unsafe behaviours, such as unhealthy eating or texting while driving, awareness alone is not enough to ensure cyber-secure behaviour. Awareness is not the only factor that influences our behaviour.

We call factors that influence behaviour behavioural determinants. Behavioural determinants can either inhibit or stimulate our behaviour; they are either an obstacle or a driver. An example of a driver is our basic human need for security (e.g., wanting to protect our home from burglars). An example of an obstacle is that we have a low perception of risk (e.g., we don’t think burglars are targeting our house). If you know which behavioural determinants play a role in your employees’ cybersecurity behaviour, you also know where to set your sight on to change the behaviour.

We will start with an intake and discuss with you what you see within your organisations that troubles you. After the intake one of the following steps is to get a clear picture of the current cyber behaviour within your organisation. By measuring what the biggest risk-increasing behaviours of employees are, it will become clear what you need to focus on to make your organisation more cyber-secure. The cyber behaviour scan, as we call it, also provides insights into factors that hinder or promote cyber-secure behaviour.