Ask most organisations how their security awareness programme is performing and they will reach for the same handful of numbers: click rates from phishing simulations, completion rates for mandatory e-learning, and perhaps the number of tickets raised to the security...

The metric that actually tells you whether your security awareness programme is working. If you run phishing simulations in your organisation, there is a good chance you are measuring success primarily by click rates. How many people clicked the link? How does that...

Understanding the cognitive biases and emotional triggers that make phishing so effective. Phishing remains the single most common entry point for cyber attacks. Despite years of awareness training, increasingly sophisticated email filters, and widespread media...

It is time to retire one of the most damaging phrases in cyber security. If you have spent any time in the cyber security industry, you will have heard the phrase countless times: “People are the weakest link.” It appears in conference presentations, vendor marketing...