Keep up, security threats are evolving

Keep up, security threats are evolving

May 6, 2021

Photo by Hulki Okan Tabak on Unsplash If 2020 taught us anything, it was that things change, unexpected things happen. Any security practitioner will tell you that security threats are always...

read more
A CISO view: the security challenges of working from home

A CISO view: the security challenges of working from home

December 16, 2020

Large numbers of us have been required to get used to working from home (WFH) in 2020 and, as we approach the turn of the year, many of us are getting a little fed up with it. But, despite the...

read more
Working from home: it’s time for security awareness to adapt

Working from home: it’s time for security awareness to adapt

October 22, 2020

2020 has seen a massive shift towards home working. By and large, businesses seem to have coped with the logistical, health and safety, and security consequences of that shift; and people seem to...

read more
Taking it to the people

Taking it to the people

March 31, 2020

There is no doubt that face-to-face security awareness activities are a valuable part of the practitioner’s toolkit. But, given current events, we need to think differently. In this article we...

read more
Is security everybody’s responsibility?

Is security everybody’s responsibility?

February 19, 2020

The statement “security is everybody’s responsibility” is a common refrain. And it is an ideal end-state culture for many organisations. Certainly from the perspective of the IT Security team –...

read more
Failure might not be the teachable moment we think it is…

Failure might not be the teachable moment we think it is…

January 16, 2020

It’s a commonly held belief that we learn from failure. But recent research has found the opposite: failure undermines learning. The results of this research raise questions about...

read more
Still chasing users to do their awareness training?

Still chasing users to do their awareness training?

December 17, 2019

One organisation recorded just a 17% completion rate following their initial email asking people to do mandatory security awareness training…

read more
Reimagining Security Awareness – What practitioners want

Reimagining Security Awareness – What practitioners want

November 12, 2019

Ask a security practitioner what they want from a security awareness programme, and the immediate response you receive will sometimes be “to tick a compliance box”, sometimes “to reduce security...

read more
Reimagining Security Awareness – Do dos

Reimagining Security Awareness – Do dos

July 3, 2019

In part two of this series of blogs reporting on our research project to “Reimagine Security Awareness” we feedback on what users told us would make them engage with security awareness training....

read more
Reimagining Security Awareness – Ask the user

Reimagining Security Awareness – Ask the user

June 14, 2019

Mention the phrase “mandatory training” to almost any employee and they will likely roll their eyes in despair. But security awareness must be part of the cyber defence strategy in any...

read more

Find out more