Secure behaviour doesn’t happen by chance. Employees need clear guidance, an environment that supports secure behaviour, and the motivation to act accordingly. Only when these three elements come together does sustainable secure behaviour emerge.
That’s why our culture assessment is based on the COM-B model:
- Capability – Do employees have the right knowledge and skills?
- Opportunity – Does leadership encourage secure behaviour, and does the working environment make it easy for employees to act securely?
- Motivation – Which drivers and habits influence employee behaviour?
