Reframing cyber security as a life skill: The missing link in behaviour change

As cyber threats grow in frequency and sophistication, we continue to invest heavily in tools, policies, and technical controls. Yet one factor remains stubbornly difficult to influence: human behaviour.

Despite millions spent on awareness campaigns, eLearning modules, and phishing simulations, many organisations still struggle with disengaged staff, poor cyber hygiene, and resistance to basic security practices. Why? Because we’ve framed cybersecurity as a technical obligation—rather than a personal, practical life skill.

In this session, Caitriona Forde makes the case for transforming not just our defences, but our approach to human risk. Drawing on over 20 years of industry experience and her upcoming PhD research into human factors in cyber behaviour, Caitriona explores how reshaping our messaging and methods can drive real, lasting cultural change.

This talk goes beyond the “people are the weakest link” narrative. Instead, it invites cyber professionals to see people as an untapped asset—capable of strengthening organisational resilience when we meet them where they are. By reframing cyber as a skill that protects not only the workplace, but also individuals, families, and communities, we create relevance and motivation that compliance training alone can’t deliver.

A key part of this transformation lies in how we communicate. Too often, the language of cybersecurity is built for IT professionals—not the people it's meant to protect. This disconnect creates friction between cyber teams and the broader business, fuelling misunderstanding, apathy, or even resistance. Caitriona explores how shifting from fear-based or compliance-heavy messaging to values-based, plain language conversations can bridge this gap—turning communication into a catalyst for culture change.

Using case studies from local councils, small businesses, mining companies, and community groups, Caitriona will unpack what works—and what doesn’t—when trying to embed secure behaviour. She’ll highlight key strategies that have helped move teams from checkbox compliance to genuine engagement, even in low-trust or tech-resistant environments.

Attendees will leave with:

In a time when transformation is essential, this talk will challenge cyber leaders to evolve their approach—not just by upgrading systems, but by rethinking how we engage our people. It’s not about simplifying cybersecurity. It’s about making it relatable, repeatable, and real.

Because the truth is, the firewall of the future isn’t just built in code—it’s built in culture.