Research & Articles

Knowledge that drives better security culture

Research insights and practical articles on behavioural science, security culture, and human cyber risk - from the CyBehave research programme.

Research Insights are findings from the CyBehave research programme - data, evidence and what it means for practice. Articles are practical guidance - how to apply behavioural science to your security programme day to day.

Showing 1–9 of 58 posts

Ai Alignment 28 Jul 2026 18 min
Give Your Agents Something to Read: Building a Normative Repository for Agentic AI
Your agents will never see a poster or absorb culture in a corridor. But they will read a file, take it litera...
Read article →
Ai Alignment 24 Jul 2026 8 min
Fighting fire with fire, when only one side is allowed to burn
Everyone's answer to the frontier AI threat is fight fire with fire. But the attacking agent has no guardrails...
Read article →
Insight 23 Jul 2026 7 min
Security behaviour is a game
I don't mean a game in the trivial sense. I mean it in the formal sense that mathematicians and economists hav...
Read insight →
Insight 20 Jul 2026 8 min
Eighty-three theories and still nobody locks their screen
There are at least 83 published theories of behaviour change. Michie and colleagues catalogued them in 2014, a...
Read insight →
Human Psychology 17 Jul 2026 9 min
Security Is Not THE Priority
Security is what the literature calls a secondary task: something you must do on the way to your real goal. A ...
Read article →
Insight 30 Jun 2026 7 min
Is this the end of the nudge?
For more than a decade, the nudge has been the dominant idea in applied behavioural science. Change the way a ...
Read insight →
Behavioural Change 29 Jun 2026 12 min
When did awareness become a science nobody told us we had to study?
For two decades, the role was understood. You came from learning and development or communications. You wrote ...
Read article →
Strategy 22 Jun 2026 15 min
The expertise gap: why security teams must build behavioural capability
There is a quiet contradiction at the heart of most security functions. They exist because people are the most...
Read article →
Insight 4 Jun 2026 15 min
What You Inherit When You Acquire: The Security Culture Nobody Diagnosed
Security due diligence examines what an organisation has. Security culture integration examines what it does. ...
Read insight →
1237 »
Frameworks

The frameworks behind the research

Every insight and article on this page traces back to one of these. We publish all of them openly, so you can see exactly what our platforms measure, how, and why.

Put the research to work

CyBehave Heroes applies these insights directly to your Security Champions programme.