Watch the TSC webinar on building a security culture and learn how to move from tick-box training to lasting behaviour change, using the COM-B model, social norms and leadership.
Security culture is not built through training alone. It is shaped by the values, beliefs and everyday behaviours that determine how securely people work, from reporting incidents and recognising phishing attempts to asking questions, challenging unusual requests and following secure processes.
This webinar explains why organisations should start by defining the behaviours they want to see, then work backwards to build the capability, opportunity and motivation people need to act securely. Using the COM-B model, the session shows how security awareness, leadership, systems, feedback, habits and social norms all influence behaviour change.
Drawing on practical examples, including why phishing still works, how habits form and why compliance-only training often fails, the webinar sets out a clear approach to improving cyber security culture. It covers common blockers such as information overload, lack of measurement, weak leadership modelling and unclear goals, before outlining practical strategies that help secure behaviours become part of everyday work.
Essential viewing for security awareness leaders, CISOs, HR teams, managers and anyone responsible for moving from tick-box training to measurable cyber security behaviour change.
In this free webinar, you'll discover:
This webinar explains why secure behaviour depends on capability, opportunity and motivation — not training alone. TSC's security awareness training and eLearning modules help your people build everyday habits that reduce risk and strengthen security culture.
Security culture is the values, beliefs and behaviours that shape how people work securely every day. It goes beyond cyber security training and focuses on the real actions employees take, such as reporting incidents, challenging unusual requests, spotting phishing attempts and following secure processes.
Training builds knowledge, but behaviour change also needs capability, opportunity and motivation. Employees need clear expectations, supportive systems, visible leadership, regular reinforcement, feedback and easy ways to act securely. Without these, security awareness can become a compliance exercise rather than a lasting culture shift.
Organisations can improve security culture by defining the behaviours they want to see, measuring their starting point, removing blockers, supporting managers to model secure behaviour, creating regular security conversations and reinforcing good habits over time. A behaviour-led approach helps turn awareness into everyday action.
Human Risk Platform
Products & Services