Security Behaviour Database

About SebDB


The challenge faced by security professionals

Managing human cyber risk is hard. It calls for a focus on the security behaviours that reduce risk.

Behaviour change is difficult and complex.

Many organisations struggle to identify behaviours to target in their intervention efforts. They may have broad targets such as “increased awareness” or “reduced malware infections” but these are non-specific and are not behaviours.

For true behaviour change, it requires us to be specific and focused on what behaviours are being targeted. But where to start?

Designing effective behaviour change interventions, requires prioritising security behaviours to target.

Links between security behaviours and risk should be clear. It should also be easy to explain how awareness, behaviour and culture activities reduce risk over time..

It should be possible to see what (if any) impact your people-related security controls are having on security behaviours.

Decisions should be made using evidence. Not guesswork.

Introducing SebDB

SebDB is the world’s most comprehensive cyber security behaviour database.

It is co-designed and continually developed with the global security community.

SebDB v1 contains an extensive and dynamic collection of information relating to cyber security risks and how these link to security behaviours.

It makes decisions about future courses of action easy to make.

What is it for?

SebDB summarises and prioritises security behaviours by their importance and their impact on different security risks.

You can use it to prioritise which behaviours to target in your awareness, behaviour and culture activities.

And, by extension, target the reduction of specific human cyber risks.

The database has been developed by a global community of security experts, practitioners and academics. It’s evidence-based. It’s theoretically and practically sound. It’s tested iteratively. And it’s updated constantly

Community and collaboration

Cyber security challenges will only be solved by working together. That's why the database is built by the community, for the community. It’s a research effort, but it’s also a practical tool.

We really hope you find it useful. We’d love you to join the community of people sharing their thoughts and experiences to improve the database.