Security Culture Archives

A table of people smiling with their laptops opened in front of them

Article | Security Culture

Why Secure Behaviour Management is becoming the channel’s next growth opportunity

As security becomes more complex, could the channel’s next opportunity lie in understanding how people actually use the technology?

Article | Security Culture

Measure Twice, Cut Once: Why Cyber Security Needs a Baseline

The value of baselining behaviours cannot be understated in building success cyber security interventions

A desk with two people working on their laptops

Article | Security Culture

Is AI bad for cyber security?

A useful way to think about AI in cyber security is as a way of creating more capacity for human...

Article | Security Culture

Why Secure Behaviour Management isn’t just another cyber security buzzword

The term 'Secure Behaviour Management' is emerging as a new way of describing a more active, people-centred approach to cyber...

A diverse team of adults collaborating over a laptop in a bright, modern office.

Article | Security Culture

Security Culture Is Built in the Moments People Almost Miss

Security culture grows when timely support makes safer choices easier to notice and repeat daily.

Man showing stress and frustration while working remotely on a laptop indoors.

Article | Security Culture

Why Phishing Training Has to Catch Up with AI-Powered Attacks

AI phishing demands training that reflects real pressure, plausible context and timely support in practice.

An open leather backpack with a laptop on a wooden bench surrounded by autumn leaves.

Article | Security Culture

Shadow AI Is a Visibility Problem Before It’s a Policy Problem

Shadow AI becomes governable when organisations understand usage patterns before risky habits disappear from view.

A man struggling to stay awake whilst sat at his desk

Article | Security Culture

Tuesday at 9am: What AI Usage Patterns Reveal About the Modern Workforce

The Redflags report found that the peak times for visiting AI sites were Monday, Tuesday, Wednesday, Thursday, Friday, and Monday...

Article | Security Culture

OpenAI vs. the Rest: The Enterprise AI Landscape Your Security Team Needs to See

Findings from the latest Redflags report show that OpenAI still leads the way as the most popular AI tools used...

Article | Security Culture

What Risks Do AI and Copilot Tools Create for Compliance?

The rapid rise of artificial intelligence tools is reshaping how organisations work and redefining workflows. But this transition is happening...

The back of a person's head who's coding on a computer

Article | Security Culture

A Hacker’s Perspective: Cyber Security Compliance and Human Risk

Glenn Wilkinson, ethical hacker and co-founder of Agger Labs: “A lot of organisations overestimate their position,” he explains. “They think...

A person is pointing at a laptop screen with charts and graphs on it.

Article | Security Culture

From Data Points to Decisions: What Makes a Cyber Security Metric Useful

The most useful question to ask of any security awareness metric is whether it helps someone make a better decision.

Article | Security Culture

What Is The Role of Leadership In Creating Zero Trust Architecture For Your Organisation?

Zero Trust Architecture (ZTA) is a security framework for businesses that assumes no user or device can be trusted. Whether...

Article | Security Culture

Cyber Security Becomes Priority As Bank Loyalty Declines

A recent study finds that bank loyalty is no longer as strong as it once was. This decline in loyalty...

Article | Security Culture

CISOs Challenge Traditional Boardroom Views on Security Strategy

Splunk’s The CISO Report highlights the ongoing challenge CISOs face in aligning security priorities with boards; as conversations continue about...

Person staring at laptop with reflection on glasses

Article | Security Culture

Bosses Risk Losing Trust with Excessive Surveillance

With remote work on the rise, many companies have increased surveillance as a means of ensuring productivity when workers are...

Article | Security Culture

What are the Biggest Cyber Security Threats to the Financial Services Industry in 2025?

The financial services industry has long been a prime target for cyber criminals – and in 2025, the stakes are...

Article | Security Culture

Enhancing Cyber Resilience in Financial Services Through a Data-Driven Approach

Financial institutions are prime targets for malicious threat actors due to the valuable assets and sensitive data their systems contain....

Man with focused expression looks at laptop

Article | Security Culture

Senior Leaders Struggle to Spot Cyber Threats

A Tech.co study reveals that most senior leaders struggle to identify phishing threats, raising concerns about executive cyber awareness. As...

Article | Security Culture

Gen Z Redefines Working Day Through Rejection of Burnout Culture

Gen Z is experiencing unprecedented burnout, driven by the demands of modern workplaces and a shifting focus on mental health....

Article | Security Culture

Does Your Team Need Cyber Awareness Training? Make Sure it Covers These 5 Things

You don’t need us to tell you that cyber threats are getting more sophisticated by the day (and perhaps even...

Article | Security Culture

AI FOBO Concerns Threaten To Lead To Workforce Exodus

As concerns about job security rise, many employees are feeling the pressure of being replaced by AI-driven systems. This growing...

Article | Security Culture

Remote Working Pushes Financial Services To Rethink Cyber Security

A Deloitte survey suggests that remote work is a key demand among financial services employees, with many willing to quit...

Article | Security Culture

Trust Erodes When Consent Lacks Clarity in the Workplace

Some employees report feeling “hoodwinked” despite providing written consent, as unclear details erode trust, according to a Cornell University study....

Article | Security Culture

How microlearning is redefining the next wave of cyber security training

Cyber security training often fails to address the realities of how people truly learn and behave, leaving employees ill-equipped to...

Article | Security Culture

Why is Security Awareness Training Important?

The frequency and variety of cyber threats are rising at an alarming rate. In the UK alone, over half of...

Animation of small person sitting on a laptop

Article | Security Culture

Mastering Timely Interventions and Nudge Theory

Timing is key for delivering any kind of security comms messages to your team. In the fast-moving world of cybersecurity,...

Article | Security Culture

How To Shape Your Security Identity

When we hear the word “identity” in the world of security, we may think of identity management. However, identity can...

Animation of two people. One person has question marks over their head.

Article | Security Culture

Strengthening Security Behaviours by Asking the Right Questions

When it comes to cyber security training, it’s easy to fall into the trap of information overload. Do you start...

Animation of a mobile phone and emojis floating above

Article | Security Culture

Mastering The Art of Emotional Language

The cyber security industry has a problem. Everyone is scared of the subject, and a lot of it is our...

Article | Security Culture

Exploring The Transformative Power Of Simplified Language

This series will focus on the power of language and how using the right words can encourage positive behaviours, reduce...

Article | Security Culture

Fear and Silence: Half of Employees Afraid to Report Security Mistakes

Despite the increased adoption of security awareness training, our latest research reveals that more than half of cyber security professionals...

Article | Security Culture

The time is now for a human-centric approach to cyber resilience in our Critical Industries

In an increasingly digitised world, Critical National infrastructures (CNI) stand as vital pillars supporting our modern way of life. However,...

Article | Security Culture

Healthcare at Risk: ICO and DBIR Data Analysis

Redflags reviewed data from the Information Commissioner’s Office (ICO) and the 2023 Data Breach Investigations Report (DBIR), suggesting the need...

A yellow door with cardboard boxes in front of it.

Article | Security Culture

How Redflags® approached holiday season scams in 2023

Black Friday, Cyber Monday, and the holiday season are some of the busiest periods for online shoppers. However, it’s also...

Article | Security Culture

Do You Wanna Be My Sugar Baby? A Tale of Cybersecurity Savvy

In the vast realm of cyberspace, a world filled with opportunities and pitfalls, one young woman’s story is a testament...

Animation of a magnifying glass and statistics and graphs and charts

Article | Security Culture

Measuring the success of phishing simulations, “positive” behaviour change

Most organisations now accept the need for a Security Awareness Training programme in some form or other. But what’s the...

Article | Security Culture

Too soon, too late, just right – Our Goldilocks theory of security awareness

We’ve previously introduced Kate as a typical employee being subjected to traditional security awareness training. After her training she goes...

Animation of woman sat staring at a laptop

Article | Security Culture

When work and security awareness collide… - Kate's Story

The NCSC recently set a “better engagement” challenge. Their view was that traditional security awareness wasn’t working to drive the...

Article | Security Culture

What is a Misdirected Email?

In this article, we explain the issue of misdirected emails, set out some example email data breaches and then highlight...

The word 'responsibility' written in the clouds

Article | Security Culture

3 simple steps to improve your cyber security culture

The statement “security is everybody’s responsibility” is a common refrain. And it is an ideal end-state culture for many organisations....