Building security into the framework of an organization prevents security from being seen as a barrier to daily activities. If an employee feels as if a security measure is inhibiting them from completing their daily tasks, they're far more likely to find a way around that measure. This can range from propping open a door to using the same easy-to-remember password for every account.
"We don't care as, ultimately, we're going to prepare your organisation and your workforce to be trained correctly and be an advantage for you in the market," he says. "Now it is probably 100% humans we train and zero agents, tomorrow it may be 60 humans and 65 agents - we're not going to care."
Cybersecurity is as much about communication as it is about code. When leadership sends mixed signals - one message in a company memo, another in marketing materials - the inconsistency confuses employees and customers alike. A StratusPoint IT report found that 74% of data breaches involved a human element, including social engineering and error. These incidents often begin with misunderstanding rather than malice.