Understanding behaviour is only the beginning; lasting change requires a lifecycle approach. The Behavioural Change Lifecycle provides a structured, evidence-based process for influencing secure behaviours across your organisation. From diagnosing the root causes of human risk to designing targeted interventions, embedding new habits, and evaluating long-term impact, this lifecycle ensures that change is not just reactive or one-off but sustainable and strategic.
Whether you’re launching a new policy, developing a Champions network, or shifting security culture, this framework helps you move beyond awareness to action – turning insights into impact at every stage of the journey.
The diagram below describes the behavioural change lifecycle in five stages.

Below we describe in more detail each of the five stages, along with a mapping of relevant tools and links to understand more about those tools from a practitioner perspective.
Stage 1. Understanding / Diagnosing Behaviour
Goal: Identify what behaviour needs to change and why it isn’t currently happening.
- Tools: COM-B, Theoretical Domains Framework (TDF), interviews, surveys, observation
- Questions to ask:
- What is the target behaviour?
- Who needs to change?
- What are the barriers and enablers?
- Outcome: A clear behavioural diagnosis that guides intervention design.
Stage 2. Designing the Intervention
Goal: Create targeted interventions based on behavioural insights.
- Tools: Behaviour Change Wheel (BCW), Behaviour Change Techniques (BCT) Taxonomy, Nudge Theory, User-Centred Design, CFIR
- Includes selecting intervention functions (e.g. education, persuasion, enablement) and delivery methods (e.g. emails, nudges, champions)
- Outcome: A behaviourally-informed strategy and action plan.
Stage 3. Engaging / Delivering the Intervention
Goal: Implement the planned interventions effectively with the right stakeholders.
- Tools: Social Network Analysis (SNA) to select influential messengers or champions; Diffusion of Innovations to time rollout, and CFIR to map conditions that support or hinder adoption
- Includes pilot testing, stakeholder communication, and deployment
- Outcome: Behaviour change interventions reach the right audience in the right way.
Stage 4. Embedding / Reinforcing Behaviour
Goal: Ensure behaviours stick over time and become part of routine practice.
- Tools: Habit Formation Theory, Self-Determination Theory (SDT), feedback loops, performance reinforcement, CFIR
- Strategies may include environmental cues, social norms, rewards, or practice opportunities
- Outcome: Target behaviours become habitual and culturally embedded.
Stage 5. Evaluating and Adapting
Goal: Measure impact, learn what worked, and adapt for improvement.
- Tools: Mixed-method evaluation, pre/post-behavioural metrics, surveys, qualitative feedback
- Includes ongoing monitoring and adapting interventions to maintain relevance
Outcome: Data-informed refinements that increase long-term effectiveness and value.
Summary Table
| Stage | Purpose | Key Tools/Models |
| 1. Diagnosing | Diagnose behaviour | COM-B, TDF |
| 2. Designing | Plan effective interventions | BCW, Nudges, CFIR |
| 3. Engaging | Deliver and communicate | SNA, Diffusion of Innovations, CFIR |
| 4. Embedding | Sustain behaviour | Habit Theory, SDT, CFIR |
| 5. Evaluating | Measure and improve | Surveys, metrics, feedback, CFIR |