Insights
Short research summaries from the CyBehave programme: one finding, what it means, and what to do with it.
Showing 1 to 12 of 22.
Who Is the Choice Architect for Your Agents?
Ask an organisation that deployed AI agents and decided how they behave, and you'll usually find a name by working backwards through a repository.…
Read insight →Nobody Told the Agents How We Do Things Here
A new joiner learns how an organisation behaves long before they read a policy. They watch who gets challenged at the door. They hear what the team…
Read insight →Nudge and boost were built for a world without an opponent. Security has one.
Picture a finance officer on a Thursday afternoon. An email arrives from a supplier she has dealt with for years, asking her to update their bank…
Read insight →Behaviour Change in Complex Systems
Most organisations treat security behaviour as a plumbing problem. There is a pipe. Training goes in one end; compliant behaviour comes out the…
Read insight →Seven months on from Moltbook
In February we wrote that AI agents had built their own social network and that your threat model wasn't ready. Moltbook was four days old. It looked…
Read insight →The Champion Density Problem
What the science of how behaviour spreads says about how many champions a team really needs, and why your best-connected people may be your weakest…
Read insight →Fewer Meetings, More Engagement: What Breakout Action Groups Suggest About Champion Network Structure
Almost every security champions programme starts the same way. Someone sets up a recurring meeting, invites the volunteers, and puts a standing…
Read insight →We made our website readable by machines
Somebody asked an AI assistant about security champions programmes last month. It gave them an answer. Our name may or may not have been in it, and…
Read insight →Security behaviour is a game
I don't mean a game in the trivial sense. I mean it in the formal sense that mathematicians and economists have used for eighty years: a situation…
Read insight →Eighty-three theories and still nobody locks their screen
There are at least 83 published theories of behaviour change. Michie and colleagues catalogued them in 2014, and between them those theories contain…
Read insight →Is this the end of the nudge?
For more than a decade, the nudge has been the dominant idea in applied behavioural science. Change the way a choice is presented, without removing…
Read insight →What You Inherit When You Acquire: The Security Culture Nobody Diagnosed
Security due diligence examines what an organisation has. Security culture integration examines what it does. Most M&A security programmes…
Read insight →From reading to doing.
Find out where your Champions programme stands with the free Health Check, or see the research running in HEROES by CyBehave.