Featured · Security culture and behaviour
What is secure behaviour management?
What secure behaviour management (SBM) is, how it differs from security awareness training and HRM, and what CISOs should ask an SBM vendor.
Keepnet blog
Research, guides and analysis on phishing, social engineering and building secure behaviour in employees.
Security culture and behaviour
41 articles · page 1 of 4Security culture, secure behaviour and how to measure behaviour before and after.
Keepnet Surveys: Measure and Shape Security Culture
Keepnet Surveys lets you run Security Culture Surveys, pulse checks, and campaign follow-ups, then turn results into action. Get AI-assisted analysis, automatic localization, and omni-channel delivery (Teams, email, web) to raise response rates and close the loop with targeted training.
Transforming Organizational Culture: 5-Dimensional PRISM Framework
The 5-dimensional PRISM framework helps organizations in embedding secure behaviors. It focuses on the aspects of values, identity, and team dynamics. Consequently, this approach fosters lasting change within the organization.
What Is a Culture Hack and How Can It Improve Your Organization's Security Culture?
Small change, big impact: Discover how culture hacks, tiny interventions in behavior and communication, can transform your employees’ cybersecurity habits and build a stronger security-first mindset.
Why a Security Champion Program Is a Game-Changer
Security Champion Programs turn everyday employees into trusted cybersecurity advocates. Discover how to launch, train, and scale a successful program that aligns with business goals and reduces human-driven threats.
What are Outcome-Driven Metrics For Security Awareness Training?
Learn how outcome-driven metrics (ODMs) tie security awareness training to real risk reduction: how people detect, report and respond to threats, and what that means for the business.
Why SMBs Need Proactive Human Risk Management
In 2024, 94% of SMBs experienced cyberattacks, with average breach costs reaching $4.88 million. Learn why proactive human risk management is essential for SMBs to safeguard against these threats.
What Is the Security Culture Maturity Model, and How Does It Benchmark Your Security Behavior and Culture Program?
The Security Culture Maturity Model (SCMM) helps organizations evaluate and enhance security culture. Learn how SCMM benchmarks security behavior, identifies gaps, and creates a structured path to a resilient security culture, empowering employees to defend against cyber threats.
Human-Driven vs. Employee-Driven Cyber Risk: Understanding the Key Differences
50% of UK businesses faced cyberattacks in 2024, with 68% of breaches linked to human error. Discover the differences between human-driven and employee-driven cyber risks and learn how to protect your organization with AI-powered threat detection and security awareness training.
Top Behavioral Science Frameworks & Models for Cybersecurity
The annual average cost of cybercrime is expected to exceed $23 trillion by 2027. Discover how behavioral science models like COM-B, PMT, and Dual-Process Theory can transform security behavior, reduce cyber risks, and build a strong security culture. Gain actionable insights to protect your organization.
Harnessing Ego to Drive Secure Behaviors: A Behavioral Science Approach to Security Culture Programs
Ego is a powerful motivator in cybersecurity. Learn how to leverage behavioral science to align employees’ natural motivations with security goals, driving engagement, reducing risks, and fostering a security-first culture through ego-driven strategies.
Harnessing AI to Increase Full-Time Employees' Efficiency in Managing Human Cyber Risk
With 80% of cybersecurity awareness programs run by one or fewer full-time employees, AI is transforming efficiency. Discover how AI automates phishing simulations, security training, and SOC operations, reducing manual workload and delivering measurable business value.
What Is an Example of a Negative Cybersecurity Culture?
A weak cybersecurity culture causes leadership neglect, employee disengagement, and security gaps. This blog explores how these issues manifest, their consequences, and key strategies to build a security-first workplace that reduces employee-driven cyber risks.
See how Keepnet turns awareness into secure behaviour
- Multi-channel phishing simulations, not email-only
- Training and nudges matched to each employee's behaviour
- Behaviour measured before and after
30 minutes with a Keepnet specialist, on your own use cases.