Articles
Longer guides on building security culture, managing human risk and running Champions programmes.
Showing 1 to 12 of 54.
Behavioural change for awareness professionals: what actually moves people
You know the training landed. Completion is high, the quiz scores are good, and the behaviour is unchanged. That is not a failure of your programme;…
Read article →Moving on from the spreadsheet
Almost every champions programme started in a spreadsheet, because until recently there was nothing else. Spreadsheets fail at lifecycle, coverage,…
Read article →How to scale a champions programme without losing what made it work
A programme that works at twenty champions often stops working at two hundred. The activity is the same, the numbers look better than ever, and the…
Read article →Volunteer, voluntold or chosen: how to recruit champions who change behaviour
Volunteers bring motivation without reach. Appointment brings reach without motivation. Neither starts from what a champion is for: their position in…
Read article →Where to start: the first ninety days of a champions programme
The hardest part of a champions programme is the first three months, when the idea is agreed and nothing exists yet. The early choices set the shape…
Read article →Making the business case for security champions
Most champions programmes never get properly funded. They start as a side project, survive on goodwill, and fade when the sponsor moves on. The…
Read article →Simple and Complex Contagion
Information spreads on a single contact. Behaviour does not. Reporting a suspicious email, challenging a senior request or following a slower secure…
Read article →Why now is the right time to start a champions programme
Security champions are not a new idea, so what has changed? Five things, and they have converged at once: AI-generated attacks that land at team…
Read article →Multi-Agent AI Is Replicating Social Psychology
Multi-agent AI research has quietly become a replication project for social psychology. Independent teams keep finding Asch's conformity curves,…
Read article →John in Sales built an app this afternoon
Polish used to be an honest signal that somebody had thought carefully about how a thing was built. It is now free. John in Sales can produce…
Read article →Give Your Agents Something to Read: Building a Normative Repository for Agentic AI
Your agents will never see a poster or absorb culture in a corridor. But they will read a file, take it literally, and act on it thousands of times a…
Read article →Fighting fire with fire, when only one side is allowed to burn
Everyone's answer to the frontier AI threat is fight fire with fire. But the attacking agent has no guardrails, no legal review and nobody to answer…
Read article →From reading to doing.
Find out where your Champions programme stands with the free Health Check, or see the research running in HEROES by CyBehave.