QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Pellmarsh Retail Group must fund one of three security-culture bids after £3.4M of human-factor losses: a dashboard says 91% of staff are trained, but the reporting thermometer shows only 8.5% of 64,000 staff reporting anything, rising to 13.2% against a 20% target. Three pilot arms are compared on cost, avoided loss and measured effect — monthly phishing simulations at £0.48M a year with no reporting effect, manager-led huddles at £2.6M, and a champions network at £1.35M a year that lifted store reporting by 12.1 points and is recommended — while reporting by division, from 4% in the stores to 41% in technology, rises everywhere.
CY-PRO-092Pro Level · Security Awareness

Evidence-Based Security Culture Investment

Help the board choose which security-culture programme to fund — on evidence.

40 hours12 chapters60 lessons433 activities12 labs

What you'll learn

  • Measure security culture by behaviour — reporting rate, time to report, report quality, repeat incidents and trust — across every division, with fixed definitions and no individual identified.
  • Test competing programmes with matched pilots, pre-registered claims and difference-in-differences, and design simulations, manager programmes and champions networks that work ethically.
  • Target programme intensity by loss, silence and reach, back key behaviours with controls, and protect trust with data protection by design and a just-culture rule.
  • Convert behaviour into avoided loss with honest uncertainty, compare options at the margin, and win a gated, owned, monitored resolution a board can be held to.
Price:৳15,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.