Whitepapers

[COMING SOON] Oh, Behave! The Annual Cybersecurity Attitudes and Behaviors Report 2026-2027

Do people's worries about online safety match how they actually behave? Our annual study with the National Cybersecurity Alliance reveals how attitudes and behaviors shape human cyber risk – and what you can do about it.

IMPACT 2026: The findings

The IMPACT 2026 conference brought together security researchers and practitioners across the UK and US to explore the latest findings on human risk. Download the whitepaper to explore key themes, data, and insights from the event.

2026-2027 security awareness predictions and trends

Dispatches from the front lines of human cyber risk. Real data, unfiltered views, and the AI reckoning that's reshaping security teams in 2026-2027.

Oh, Behave! The Annual Cybersecurity Attitudes and Behaviors Report 2025-2026

How much does attitude impact behavior – and increase cyber security risk? To answer that question check our annual cybersecurity report.

Rebooting risk: Human Risk Management’s debate, definitions, and direction of travel

Training isn’t cutting it. Dashboards aren’t telling us what we need to know. And the phrase “human error” is doing a lot of heavy lifting. But something is shifting. Human Risk Management (HRM) is being talked about everywhere. Yet, no one’s nailed down exactly what it means …yet.

IMPACT 2025: The findings

The IMPACT 2025 conference brought together security researchers and practitioners to explore the latest findings on human risk. Download the whitepaper to explore key themes, data, and insights from the event.

Nudging: The (gentle) art of persuasion

Want to boost cybersecurity by understanding how people really make decisions? Our new white paper dives deep into the power of "nudges" – subtle design changes that guide better security behaviors. We explore the science behind these techniques, including targeting both our automatic and more thoughtful responses. Curious how you can apply this to your security awareness program?

2025 security awareness predictions

Get ready for 2025 with our expert cybersecurity predictions report! Discover insights on cybercrime, human risk, security behaviors, and jobs. Download now!

Gartner® 5 Communications Tactics to Get People to Take Cyber Risk More Seriously

CybSafe shares this Gartner® report on communicating cyber risk more effectively. Discover five evidence-based tactics for getting people to take cybersecurity seriously — from workforce to boardroom.

2024 Gartner®, The Security and Risk Management Leader’s Guide to the SEC Disclosure Rules

CybSafe is proud to bring you cutting-edge research in cybersecurity.We’re sharing an exceptionally valuable report, Gartner® The Security and Risk Management Leader’s Guide to the SEC Disclosure Rules.

2024 Gartner®, How to Make Your Cybersecurity Program More Defensible to Stakeholders

CybSafe shares this Gartner® report on building a cybersecurity programme that stands up to executive and board scrutiny. Learn how to align security investments with business outcomes and justify your decisions with data.

Who cares about cybersecurity awareness month?

We asked 1,000 US and UK professionals, to understand what they think of, and how they engage with, Cybersecurity Awareness Month. Some interesting trends have emerged…You’ll find the key insights on this page.

IMPACT 2024: The findings

The IMPACT 2024 conference explored emerging research on the human factors in cybersecurity. Download the findings whitepaper for in-depth analysis, session highlights, and key takeaways from industry experts.

2024 Gartner®, Generative AI Security and Risk Management

CybSafe is bringing you the latest research into human factors and human cyber risk. Right now, it’s time to shine the spotlight on a particularly powerful piece of research: 2024 Gartner®, Generative AI Security and Risk Management.

(Gen)AI and the human aspect of cybersecurity

As ChatGPT and Dall-E settle in as household names, we’re all wondering: What’s this technology really about? What could be the implications for digital safety? What are the opportunities for human risk management? This whitepaper addresses these burning questions, and so much more. We’ve put in some serious brain-time and analysis to bring it to you, because if you’re in cybersecurity, you need this intel … yesterday.And it brings our unique insight as the human risk heavyweights. Because—spoiler— there is so much that links AI and human risk.

What your workforce wishes the cyber team knew

Being a CISO or a member of a cybersecurity team can be a thankless job. Crucial work is being done daily, often in the hope that…nothing happens! Whilst proving the value of the cybersecurity team to the board is one thing – how does the workforce think they’re doing? Are those nudges and emails landing? What do they want to see more of? What can’t they stand? We surveyed over 1000 workers to understand more.

2024 Predictions report

Get ready for 2024 with our expert cybersecurity predictions report! Discover insights on cybercrime, human risk, security behaviors, and jobs. Download now!

Why am I failing to engage my workforce in cybersecurity training?

There is an immediate need to shift towards a cybersecurity awareness approach that truly understands the challenges of people today—where personalised, on-demand, and simple experiences aren’t just desired, but expected.

The ultimate people-centric guide to ransomware prevention

Stay ahead of cyber threats with our free guide to ransomware prevention. Learn how to educate and empower your employees to prevent attacks and keep your data safe.

2023 Predictions report

Get ready for 2023 with our expert cybersecurity predictions report! Discover insights on cybercrime, human risk, security behaviors, and jobs. Download now!

Research series: Personality and digital footprints in cyber security

Our aim is to understand how these factors might play a role in a person’s susceptibility of becoming a victim of cyber crime. First part of the series focuses on personality traits and the way they could be harnessed in cyber security.

Meaningful Metrics for Human Cyber Risk

Most organizations fail to measure their human cyber risk. Some measure security training uptake. Some go a little further and measure suspicious link-clicks or report-rates. But very few can answer key security questions such as “How has our human cyber risk changed over time?” and “Which security interventions reduce most risk?"

Measuring cybersecurity culture

The CybSafe Culture Assessment Tool (C-CAT) Whitepaper demonstrates an intelligent and scientific approach to people-centric cyber security culture.

Behavior change: An intelligent approach for cybersecurity

In this whitepaper, we outline the CybSafe approach to applying behavioural science, how it’s embedded in everything we do and how our products drive behaviour change in employees.

Tackling the human aspect of cybersecurity: The psychology of a law firm

The threat to the legal sector. In the aftermath of headline-grabbing cyber attacks, managing partners in law firms around the world have been posing the same question to their firm’s IT leaders: “Could this happen to us?”