Consultancy
Security problems are human problems. The organisations that make real progress on human risk are the ones that stop treating behaviour change as a communication challenge and start treating it as a science.
With a PhD in the Psychology of Security Awareness and over 15 years working across academia, government, and industry, I bring the depth of behavioural science to the practical realities of organisational security. Below is a summary of what that looks like in practice.
Engagements range from a single insight session to a multi-year advisory relationship. All of it is grounded in evidence.
How I can help
Human risk management maturity
Most organisations don't know where they stand. I assess your programme against the Human Risk Management Maturity Model, build a prioritised roadmap, and support implementation, so you can show the board a measurable story of improvement, not just activity.
Security awareness programme design
End-to-end programme strategy built on behaviour change principles, from audience segmentation to content cadence and delivery. Not a compliance checklist. An actual plan to change behaviour.
Behaviour change measurement & metrics
Click rates measure clicks. I help you build metrics frameworks that measure actual behaviour change and risk reduction, and translate them into language that lands with CISOs and boards.
Security culture assessment
A diagnostic of the human factors shaping your security posture, where your culture helps you, where it works against you, and where to focus first.
Security champion networks
Designing and running champion networks that stay engaged, not just recruited. I help you select the right people, give them a real role in shaping behaviour, and keep momentum going long after the launch event.
Security team burnout and wellbeing
Security fatigue is a human risk factor, not just an HR issue. I help you understand where burnout and overload are undermining vigilance and compliance, and build practical interventions that protect both your people and your posture.
Usable security
Security that people have to fight isn't security they'll follow. I help you identify where friction is driving risky workarounds, and redesign controls and processes around how people actually behave.
AI, Design, and Human Behaviour
How you design AI tools shapes how people trust, question, or blindly follow them. I help you understand the behavioural risks in AI-assisted decision-making, and design systems and safeguards that keep human judgement in the loop.