Why training completion is not a measure of cyber resilience
Completion tells you a module was opened. Here are the measures that show how people would actually behave at 4pm on a Friday.
Insights
Notes on the human layer.
Practical writing on measurement, behaviour and what changes when a programme is run properly. Written from running them.
AllHuman riskPhishingAI & deepfakesCyber cultureBehaviour change
The rise of AI-assisted social engineering
The techniques are familiar. What has changed is the speed, the fluency, and now the voice — which makes verification the skill worth building.
What a phishing simulation should actually measure
Reporting rate, time-to-report and repeat-clicker concentration tell you far more than click rate alone. Here is how to read them together.
From security awareness to behaviour change
Closing the gap between knowing and doing is where the gains are. A practical model for it, without adding training hours.
Deepfake fraud: the new shape of human risk
Voice cloning is now routine. The verification habits finance and executive teams can adopt this quarter.
Articles are placeholders for launch. The structure maps one-to-one onto a CMS collection — category, date, read time, title, excerpt, body — so nothing needs redesigning when the content lands.
Ask us directly
Have a harder question than an article can answer?
Most of what we know comes out of running programmes. A short call is usually the fastest way to get it.