The problem Traditional security Cyber security awareness 90% awareness training often remains ‘fuzzy’ and ambiguous of all successful cyber doesn’t impact behaviour attacks involve some form Cyber risk remains high of human error Cost more money A lack of ABC data and Takes a lot more time metrics with which to measure and report impact Lack of Accountability/Visibility Lack of Value Recognition for ABC No easy access to the Struggle for ideas and impact latest advice, guidance, help and ideas Omission from risk reporting Photo by Itay Kabalo on Unsplash