Research & Articles

Knowledge that drives better security culture

Research insights and practical articles on behavioural science, security culture, and human cyber risk - from the CyBehave research programme.

Research Insights are findings from the CyBehave research programme - data, evidence and what it means for practice. Articles are practical guidance - how to apply behavioural science to your security programme day to day.

Showing 1–9 of 43 articles

Ai Alignment 24 Jul 2026 8 min
Fighting fire with fire, when only one side is allowed to burn
Everyone's answer to the frontier AI threat is fight fire with fire. But the attacking agent has no guardrails...
Read article →
Human Psychology 17 Jul 2026 9 min
Security Is Not THE Priority
Security is what the literature calls a secondary task: something you must do on the way to your real goal. A ...
Read article →
Behavioural Change 29 Jun 2026 12 min
When did awareness become a science nobody told us we had to study?
For two decades, the role was understood. You came from learning and development or communications. You wrote ...
Read article →
Strategy 22 Jun 2026 15 min
The expertise gap: why security teams must build behavioural capability
There is a quiet contradiction at the heart of most security functions. They exist because people are the most...
Read article →
Behavioural Change 20 May 2026 14 min
Measuring What Matters
This is Part 4 of a four-part series. Parts 1 to 3 covered dual process theory, cognitive biases mapped to att...
Read article →
Human Ai Interaction 12 May 2026 15 min
The New Behavioural Attack Surface: Why Shadow AI is Not a Technical Problem
There is a particular kind of conversation happening in organisations right now that nobody quite wants to loo...
Read article →
Human Psychology 24 Apr 2026 7 min
Designing Security for Humans
This is Part 3 of a four-part series. Parts 1 and 2 established why people behave insecurely despite knowing b...
Read article →
Human Psychology 10 Apr 2026 15 min
The Biases That Hack Your People
This is Part 2 of a four-part series. Part 1 introduced dual process theory and the knowledge-behaviour gap. T...
Read article →
Human Psychology 23 Mar 2026 5 min
Your Users Are Not the Enemy
This is Part 1 of a four-part series on behavioural science for cybersecurity practitioners. It introduces the...
Read article →
1235 »
The Science

Want to go deeper?

Explore the behavioural science frameworks that underpin our research - COM-B, the Behaviour Change Wheel, BCT taxonomy, and the evidence base for peer-led security culture change.

Read the science →
COM-B Model Behaviour Change Wheel Behavioural Convergence Theory

Put the research to work

CyBehave Heroes applies these insights directly to your Security Champions programme.