The behave hub

Shifting sands: The move from HRM to secure behaviour management

Gartner says ditch security awareness for secure behaviour management (SBM). Forrester calls it human risk management (HRM). Here's where the market is heading, and why the work matters more than the name.

Raise the bar: 50 creative Cybersecurity Awareness Month ideas

The search is over! Our Cybersecurity Awareness Month guide is packed with ideas, examples, insights, and resources. Time to shine bright and make an impact.

These 7 red flags reveal you're stuck in awareness rather than truly managing human risk

Awareness tells people things. HRM and SBM change what they do. These 7 signs show where you're stuck and how to prove real risk reduction.

The folly of predicting one person. The power of predicting a million

Behavioural data can't tell you what one person will do next Tuesday. But at scale, it reveals something far more useful – the conditions that make risky decisions more or less likely across entire populations. Oz Alashe explores why predicting the individual is the wrong question, and what actuaries, epidemiologists, and weather forecasters figured out long ago.

11 things RSA 2026 told us about the human side of cybersecurity

RSA 2026 made one thing clear: the human risk problem is accelerating faster than our ability to patch it. Here are 11 takeaways from the floor.

The anatomy of human risk

Security risk isn't just about attackers; it’s about pressure, friction, and the human behavior at the core of every control. Discover a new model for HRM.