Find the challenge that sounds like yours.

If you already have Champions, you probably also have a problem you are trying to solve. Let us introduce you to five people who do. Each of them runs a network, each has a challenge we hear constantly, and each one shows what the Heroes base platform does about it from day one and where an add-on module takes them further. Each one is also placed on the Security Champions Maturity Model, because the challenge usually comes down to the stage the network is at. Building a programme from scratch instead? Start here.

Meet five people. Click the one whose challenge sounds most like yours.

Choose a person to see how Heroes supports them, or .

01
Priya · Security awareness coordinator
“I have lost track of who is active and where the gaps are”
You run a working network, or have just inherited one, from Outlook, a SharePoint list and a Teams channel. Some Champions are active, some have quietly stopped, and nobody is sure which teams still have one. You are not being asked about behaviour change. You need to run the network well and stop losing track.
How Heroes supports this · Base and Risk & Incidents are available now; other named modules are in development
1
Base
Bring the network in as it is
Import your Champions with their teams and sites. If it is three hundred names and forty active people, that is fine: the first thing Heroes shows you is the difference.
2
Base
Run tasks and events from one place
Give Champions something to do, see who has done it, chase the rest. Schedule the monthly meeting and track who turned up. This replaces the spreadsheet rather than adding to it.
3
Base
Read the status view
Coverage by team or site, and who is active, so a part of the organisation going quiet is visible early, not when the network has gone quiet.
4
Base
Keep the rhythm going
Recognition, Champion of the Month and the engagement calendar keep people involved without you having to write a reminder email every week.
Capabilities involved
Champion management Tasks and events Engagement calendar Coverage map Status view Recognition

The key insight: A coordinator can run a network in Heroes for years without ever opening a network graph. Every operational feature is also quietly collecting the data that answers the harder questions when someone eventually asks them.

What this achieves
One place instead of four Tasks, events, feedback and status replace the inbox, the list, the channel and the document.
Drift caught early Decliners and coverage gaps are visible before they become a dead network.
Evidence collecting itself When someone asks whether the network is having an effect, the answer is already being assembled.

Ideal for: Awareness coordinators and programme managers running a live network who want to run it well.
On the maturity model
Stage 1, Roster, and slipping

Priya has the Stage 1 gates on paper: a named champion in most units and a route from the centre to each. What she cannot see is whether they still hold, which is the first thing the model asks. The work is to make Stage 1 real again before anything else: who is active, which teams have nobody, whether an alert still reaches every team.

Read about this stage →
02
Marcus · Head of security awareness
“I am being asked what the programme has actually changed”
Your network works. Completion is high, Champions share content and staff the stand in October, and your CISO or board has started asking a harder question: what has any of this changed? Activity reports are not landing any more, and you need evidence of behaviour, not delivery.
How Heroes supports this · Base and Risk & Incidents are available now; other named modules are in development
1
Base
Measure behaviour from the people who see it
Every quarter, through the Team Pulse, colleagues rate the security behaviours they observe in their own team. That is the Behaviour Index: independent of your training platform and independent of the Champions themselves, and part of Base from day one.
2
Measure & Evidence
Add the programme view
Programme Capability, a composite measure of how well the programme is run, assessed by you and your security team. Network Strength, reported by the Champions themselves, comes with Network Optimisation. Each measure says plainly what it is based on and when it is being withheld.
3
Measure & Evidence
Trend it and test it
Trend every measure over time with reliable-change testing, so you can say a shift is real and not normal wobble. Break the Behaviour Index down by team and site so growth is visible where it happened.
4
Measure & Evidence
Put it in front of the board
Scheduled board packs to people who never log in, evidence packs mapped to an audit framework, and the full maturity profile with the steps to the next level.
Capabilities involved
Team Pulse Behaviour Index Programme Capability Trend and reliable change Board pack Evidence packs

The key insight: The people best placed to say whether behaviour has changed are the colleagues who work alongside a Champion every day. Heroes asks them, and keeps that answer separate from every other signal so it cannot be argued away.

What this achieves
A number the board will accept A Behaviour Index built from what colleagues observe, not self-reported by the people being measured.
Real change told apart from noise Reliable-change testing on your own history, in your own numbers.
Evidence that arrives on its own Board packs on a schedule, in the form your audit framework expects.

Ideal for: Awareness leads and CISOs who need to move the conversation from what was delivered to what changed.
On the maturity model
Stage 2, Community, at the plateau

Completion, attendance and content are measures of the network Marcus built, and they will keep looking good. The board is asking what reached colleagues, which is a carrying-capacity question. The Behaviour Index answers it directly: colleagues rating the behaviour they observe, independent of the champions. If it is flat, the model says why, and the fix is structural rather than more content.

Read about this stage →
03
Elena · Behavioural security lead
“Our awareness metrics have plateaued and we do not know what to try next”
Click rates have flattened. Training completion is fine and has been for two years. The programme is doing everything the vendor catalogue suggests and nothing is moving. You suspect the problem is not awareness at all, but you do not have a way to find out what it is.
How Heroes supports this · Base and Risk & Incidents are available now; other named modules are in development
1
Base
Name the behaviours that matter
Choose priority behaviours from the catalogue rather than topics from a calendar, and baseline each one through the Team Pulse and Champion check-ins.
2
Base
Design against the diagnosis
The guided designer takes you from a named behaviour to a running intervention in eight steps, with a stated expected effect, so every intervention is a test rather than a guess.
3
Base
Let Champions run it locally
Interventions are delivered by the people with credibility in each team, with tasks, comms and recognition in the flow of work.
4
Behavioural Science
Go deeper when you want to
The COM-B diagnostic, change-wheel matching, a prediction committed before launch and the retrospective against it, for the point where you want the full method and its workings.
Capabilities involved
Priority behaviours Team Pulse Guided designer Champion journeys COM-B diagnostic Predictions and retrospectives

The key insight: Plateaued metrics usually mean the programme has run out of things that awareness can fix. The next gains come from diagnosing capability, opportunity and motivation, and that is what the designer is built to do.

What this achieves
A diagnosis, not a hunch Every intervention starts from what is actually stopping the behaviour.
Interventions that are tests Each one states what it expects to change, so you learn whether it did.
A way past the plateau The catalogue of things to try becomes a method for choosing between them.

Ideal for: Awareness leads whose programme is mature on delivery and stuck on outcomes.
On the maturity model
Stage 2, Community, at the wall

Elena has done everything a Stage 2 programme can do. The behaviours she is targeting need reinforcement from several colleagues at once, and a community of champions supplies one adopter per team. Diagnosis tells her what stops the behaviour; the model tells her the network has to be reshaped to carry the intervention: pairs in the target teams, a thinner community, and exposure counts instead of click rates.

Read about this stage →
04
Amara · Group programme manager
“Coverage rests on a few people and I cannot see where to recruit next”
Your network spans divisions, sites or countries. A handful of well-connected Champions carry most of the reach, whole areas have nobody, and when one of the good ones moves on you lose a region. You need to see the shape of the network, not just the list.
How Heroes supports this · Base and Risk & Incidents are available now; other named modules are in development
1
Base
See coverage by team, site and function
The coverage map shows which parts of the organisation have a Champion and which do not, and the Champion influence map captures how security actually spreads.
2
Network Optimisation
Read the network in detail
Who bridges teams, who is isolated, which areas are unreached, and whose position carries a message furthest.
3
Network Optimisation
Recruit from the gaps
Recruitment targeting drawn from the network rather than from whoever volunteers, so every new Champion adds reach.
4
Network Optimisation
Protect against single points of failure
Succession planning and single-link coverage risk, so the network outlasts any one person.
Capabilities involved
Coverage map Champion influence map Network analysis Centrality and bridges Recruitment targeting Succession planning

The key insight: Influence travels through the real network, not the org chart. A network that is designed around where influence actually flows needs fewer Champions to reach more people, and survives the ones who leave.

What this achieves
Coverage you can see Gaps by team, site and function, before they become incidents.
Recruits that count Each new Champion chosen for the reach they add.
A network that outlasts its members Succession and single-link risk managed rather than discovered.

Ideal for: Group programme managers and anyone who has inherited a network larger than they can see.
On the maturity model
Between Stage 3 and Stage 4

A few well-connected champions carrying most of the reach is a Stage 3 network with narrow bridges. The Stage 4 work is exactly Amara's list: measure bridge width between sites and countries, recruit from the gaps the network shows rather than from whoever volunteers, and manage the single-link risk so a region does not go dark when one person leaves.

Read about this stage →
05
Jess · Security operations manager
“The programme exists because of an incident, and the next one is coming”
Something happened, and the Champions programme was part of the response. Now the security team needs the programme to record what happens on the ground, see the pattern in it, and work on the behaviours that the incidents point to, without waiting for the network to mature first.
How Heroes supports this · Base and Risk & Incidents are available now; other named modules are in development
1
Base
Point the programme at the behaviours that matter
Priority behaviours chosen because of what happened, with interventions designed and run through Champions in the teams affected.
2
Risk & Incidents
Record risks and incidents in the programme
A risk register and heatmap that Champions and the whole workforce can report into, and an incident register tied to behaviours with a review queue.
3
Risk & Incidents
Let the pattern set the priority
Each incident under review gets a recommended response, priority, campaign or intervention, from the pattern across teams and quarters, so the programme responds to evidence rather than to the most recent headline.
4
Risk & Incidents
Get intelligence to the people who need it
Threat intelligence written by your security team in plain language, with a read-only feed Champions can take to their teams.
Capabilities involved
Priority behaviours Guided designer Risk register Incident register Behaviour attribution Threat intelligence

The key insight: A programme that started with an incident should not have to climb a maturity ladder before it can record the next one. Risk & Incidents is available from day one for exactly that reason.

What this achieves
Incidents tied to behaviours Every record points at something the programme can act on.
Priorities set by the pattern The next behaviour to work on comes from the data, not the loudest voice.
Intelligence that reaches people Written for Champions and their teams, not for analysts.

Ideal for: Security teams whose Champions programme is part of how they manage risk.
On the maturity model
Stage 1, with a Stage 3 target

Jess should not have to climb a maturity ladder before recording the next incident, and Risk & Incidents does not make her. But the behaviours the incidents point to are threshold-three behaviours, and a roster cannot carry them. The model's advice is to embed two or three champions in each affected team now, so that the change the incident demands has somewhere to start.

Read about this stage →
On the maturity model

Most running networks are at Stage 1 or 2. The questions they are asked are Stage 3 questions.

The Security Champions Maturity Model grades a programme by what its network can carry rather than by what it does. Stages 1 and 2 build a network that carries awareness: a roster, then a community of champions. Stages 3 to 5 need a network shaped to carry behaviour: champions embedded in pairs inside the teams that need to change, then bridged across departments, then able to hold a norm without them. Running Your Network is mostly about the first two stages, and about recognising when a challenge is really the wall between the second and the third.

Dotted terms show a short explanation when you point at them, or tap them on a phone.

Stage 0AbsentNo network. A few informal contacts in the business.
Stage 1RosterChampions recruited against a ratio. Hub and spoke. Carries alerts and content.
Stage 2CommunityChampions have a channel and a community of their own. Awareness at its plateau.
Stage 3EmbeddedPairs or triads inside target teams. The first behaviour lines move.
Stage 4BridgedTipping crosses from seeded teams to neighbours and across departments.
Stage 5Self-sustainingTeams hold the norm when a champion leaves. New champions emerge from tipped teams.
Carries simple contagion: awarenessCarries complex contagion: behaviour

The five people above, placed on the model. Click a name to go to their challenge. Read the maturity model →

Which shape has your network grown into? The network models page describes the five shapes programmes build, and the free Champions Programme Health Check gives you a first read on where yours stands.

See how Heroes fits your network

Start a 28-day free trial and explore the platform at your own pace. No credit card. No obligation.