Humans are the reason IT exists — they buy it, operate it, maintain it, and eventually dispose of it. Every single cyber event, whether technical or not, has a human in the loop. That means humans are part of 100% of all cyber attacks.
For too long, we’ve relied on annual training and phishing simulations as our main response to cyber-behavioural risk. The data is clear: it’s not enough. We must treat behavioural risk with the same rigour and investment as technical risk.
People are complex. If we treat them with simplistic solutions, we expose our organisations to greater danger. We don’t pretend to have all the answers. That’s exactly why CyberBx exists.
Our consultancy services focus on mapping human risks across digital systems. We work closely with stakeholders to uncover process vulnerabilities, behavioural blind spots, and points of friction that lead to insecure actions.
Each engagement delivers a bespoke strategy with pragmatic steps to reduce human-related cyber risk — whether through better communication, simpler tooling, or culture-aware change management.
We deliver tailored, human-focused training for cyber teams, educators, and leaders. Our sessions equip professionals with the tools to assess, influence, and improve security behaviours — without relying on fear, compliance, or blame.
We emphasise applied psychology, attacker realism, and inclusive thinking to create learning experiences that truly shift mindset and action.
We build and share powerful in-house tools to support teams embedding behavioural insights. These range from attacker empathy exercises to threat mapping templates, SE Lego Brick taxonomies, and assessment checklists.
Our goal is to make it easy to operationalise behavioural thinking without expensive platforms or endless external dependency.
We conduct rigorous and creative research into the human dimensions of cybersecurity. From field experiments on attacker perception to longitudinal studies on blame language and user behaviour, our work drives practical, evidence-based change.
We actively publish findings, contribute to academic and practitioner communities, and partner on high-impact behavioural initiatives.