When did awareness become a science nobody told us we had to study?

There is a quiet anxiety moving through the awareness profession.

For two decades the awareness role was reasonably well understood. You came from learning and development, or communications, or you fell into it from a technical security post because someone had to run the phishing simulations and book the annual training. The skills were knowable. You could write clear copy, build a slide deck, schedule a campaign, deliver a confident webinar, and report completion rates to a board that mostly wanted to see a green tick against a compliance line. It was a craft. It had recognised tools, recognised outputs, and a recognised path in.

Then the ground moved. The profession that hired for instructional design and communications flair is now, increasingly, expected to hire for behavioural science, applied psychology, and a researcher's instinct for measurement. And it is doing so without ever having paused to acknowledge that this is a different job. We have changed the destination without redrawing the map.

It is worth making clear that this is not a uniform picture, because the easy version of this story is unfair to many good people. Some awareness professionals have taken on the challenge and run with it. They have read the literature, sought out mentors, and are now doing genuinely excellent behavioural work, diagnosing problems properly, designing real interventions, and measuring whether the change held. They are proof that the transition is not only possible but already underway, and they deserve to be recognised as the early shape of where the whole profession is heading.

But a great many are not there yet, and not through any failing of their own. They are doing the job they were hired to do, doing it conscientiously, watching the language around them shift, and quietly waiting for the day a leader turns round and says, right, from tomorrow we are doing this behavioural change thing. They are being asked, in effect, to become a different professional overnight, with no map, no time to read one, and no acknowledgement that what is being requested is a genuine change of discipline rather than a change of emphasis. The anxiety is not irrational. It is a reasonable response to an unreasonable expectation.

That is the real challenge of moving from awareness to behaviour and culture. It is not, at root, a challenge of strategy, budget, or executive buy-in, though all of those matter. It is a challenge of skills, identity, and belonging, and it is felt most sharply by the people we are quietest about. If we are honest about it and make the path visible rather than spring it on people, we will manage the transition far better than if we keep pretending it is simply awareness with a more fashionable name.

The role we thought we understood

It is worth being clear about what awareness actually demanded, because the demands were real and the skills were valuable.

Designing and delivering awareness materials is its own discipline. Writing for a non-technical workforce without patronising it, structuring a mandatory training module so that it survives contact with a distracted employee on a Friday afternoon, holding a room during a live webinar, sequencing a year-long campaign so that messages reinforce rather than compete, all of this is skilled work. Learning and development professionals spent careers mastering it. The awareness function inherited that craft and applied it to security, and for the threat landscape of its time, it was a reasonable fit. If the goal was to inform people, the skills of informing people were the right skills to have.

The trouble is that informing people was never the same as changing what they do. We knew this uncomfortably well, because completion rates climbed year after year while incident causes stayed stubbornly human. The gap between what people knew and what people did was always there. We simply did not have the disciplinary vocabulary to explain it, so we filled the space with more of what we already knew how to make. More content. More frequency. More polish.

The skills the new role actually requires

Moving the target from knowledge to behaviour does not refine the awareness skill set. It expands it into territory that learning and development never claimed to cover.

To deliberately change behaviour, you need to understand why people do what they do, which is the domain of behavioural science and psychology rather than instructional design. You need to diagnose a behaviour before you attempt to shift it, separating a capability problem from an opportunity problem from a motivation problem, because the intervention for each is entirely different, and the wrong one wastes everyone's time. You need to design interventions, test them, and measure whether they worked, which is the posture of a researcher, not a content producer. You need enough statistical literacy to know the difference between a behaviour that genuinely changed and a number that merely moved. And because the field is still young and still arguing with itself, you need the humility to keep learning, because the evidence base is being written around us in real time.

This is a substantial ask. It is not a weekend course. It is the difference between knowing how to communicate a message and knowing how to engineer a change in human action and then prove it held. Both are valuable. They are not the same profession, and treating them as interchangeable does a disservice to the people we are asking to make the leap.

The barrier we built ourselves

Here is the part that the behavioural community needs to sit with honestly, because we are partly the architects of the difficulty those colleagues now face.

In our enthusiasm to professionalise, we have wrapped the work in a vocabulary that can quietly exclude the very colleagues we most need to bring with us. We talk about behavioural interventions, the COM-B model, the Behaviour Change Wheel, System 1 and System 2 thinking, choice architecture, nudge theory, the intention-action gap, protection motivation, self-efficacy, social proof, and ecological validity. Each of these terms is precise, useful, and entirely legitimate in the mouth of a practitioner who has earned it through study and applied experience. I use them daily and would defend everyone.

But imagine the awareness professional of fifteen years' standing, genuinely good at their job, sitting in a conference session or reading a strategy document and meeting that wall of terminology for the first time. The likely reaction is not curiosity. It is the quiet conclusion that this is a different world, that it belongs to people with letters after their names, and that they themselves no longer fit. We intended to signal rigour. What we too often signal is exclusion. We risk gatekeeping a transition that should be an invitation, and in doing so we put off the practitioners whose existing craft is half the answer.

The terminology is not the problem. The terminology without translation is the problem. A behavioural scientist needs COM-B because it is a working diagnostic tool. A communications professional being asked to embrace behaviour change does not need the acronym on day one. They need to understand that capability, opportunity and motivation must all be present for an action to happen, which is a plainly sensible idea that they will grasp immediately and probably recognise from their own experience. The concept transfers easily. The label, introduced too early, slams the door.

The professionals already thriving in this space tend to be the ones who were lucky enough to meet the ideas before the acronyms. We should deliberately recreate that order for everyone else, rather than leave it to chance.

Helping people transition rather than asking them to start again

If the skills have genuinely changed, then the responsible thing is to treat this as a transition to be supported, not a deficiency to be exposed. That reframing changes almost everything about how we approach it.

Start by honouring the existing craft. The awareness professional already understands audiences, channels, tone, timing, and how to hold attention. Those are not obsolete skills in a behavioural world. They are the delivery mechanism for behavioural design. Behavioural science tells you what intervention to build and why. The craft of communication determines whether it ever reaches anyone. The person who has both is more valuable than the pure theorist, not less, and we should say so plainly and often, because the prevailing message right now too easily reads as "what you knew is no longer enough."

Then translate before you teach. Lead with the plain-language idea and let the technical term follow once the concept has landed, if it needs to follow at all. People adopt ideas they understand and resist labels they do not. Sequencing matters. Introduce the thinking, demonstrate it on a real problem the person already cares about, and only then attach the vocabulary as useful shorthand among people who now share the underlying understanding.

Build the capability through mentoring and applied experience, not lectures alone. Behavioural practice is learned by doing it under guidance, diagnosing a real behaviour, designing a real intervention, measuring a real outcome, and being corrected by someone who has done it before. This is also a pragmatic necessity. The behavioural cohort within security is real but small and thinly spread, and we cannot hire our way out of the gap because the market simply cannot supply the people. The only scalable route is to grow the expertise into the practitioners already in post, which means the seasoned awareness professional is not a problem to be replaced, but the single most available raw material we have.

And be patient with the identity shift, because that is what this really is. Asking someone to move from awareness to behaviour change is asking them to hold their professional self-image lightly enough to add to it. That is uncomfortable for anyone competent, precisely because competence is hard-won and people are reasonably attached to it. The kindest and most effective thing we can do is make the path visible, make the first steps small and winnable, and make clear that nobody is being left behind for failing to already know what we are only now agreeing to teach.

The convergence underneath all of this

There is a deeper current running beneath this transition, and it is worth naming because it explains why the shift feels so disorienting and why it will not reverse.

The reason awareness can no longer remain a communications craft is that human behaviour, organisational culture and intelligent systems are converging into a single contested space. This is the argument I have developed in Behavioural Convergence Theory and extended in my latest book, Singularity, that the technological and behavioural changes reshaping our world are not separate forces arriving in sequence but a single entangled condition we are co-authoring as we go. The singularity is not a future event we are waiting for. It is a present condition we are co-authoring. The same convergence that makes behaviour the decisive layer of security is also rewriting the skills required to defend it. The discomfort the awareness profession feels is not a local difficulty. It is the personal, professional edge of a much larger shift, and that is precisely why supporting people through it with care matters so much.

We are not asking awareness professionals to abandon their craft. We are asking them to grow it into the discipline the moment now demands, and to do so without shame, without gatekeeping, and without the quiet exclusion of the very people whose existing skills are half of what makes behaviour change actually work. Get the transition right, and we do not lose a generation of capable practitioners to a vocabulary we forgot to translate. We carry them with us, and the profession is stronger for it.

The capability is buildable. The terminology can wait. The people cannot.