Three experts. Three perspectives. One conversation about human risk management because it isn’t working the way we think it is

Organisations have invested heavily in security awareness. They have rolled out training, measured completion and clicks. And now we are all pivoting to Human Risk Management and current platforms (no matter how hard they try) are just not getting it right.

The problem isn’t a lack of awareness. It’s a mismatch between how security programs are designed and how humans actually behave.

This session is not a traditional panel. It is a structured discussion between three experts, Jacqueline Jayne, Caitriona Forde and Chantelle Strauts, who bring a distinct perspective on what is working, what is not, and what the sector is getting wrong.

With over 25 years of combined professional experience in the world of SAT/HRM, and after speaking with thousands of organisations they hear and address the same challenges and widely accepted assumptions.

1. Awareness / Behaviour:​ If people know better, they’ll do better - if we raise awareness, behaviour will follow
2. Metrics / Risk:​ If we measure it, we’re managing it - phishing click rates = human risk and training completions = program success
3. Culture / Engagement:​ If we build a culture, the problem goes away - run campaigns and talk about culture

Each speaker will present a clear, experience-led perspective grounded in real-world implementation across organisations, industries, and maturity levels. These perspectives are not designed to align. They are designed to surface tension, highlight gaps, and create a more honest conversation about the current state of Human Risk Management.

From there, the discussion opens up. Where do these perspectives agree? Where do they conflict? And what does that mean for organisations trying to reduce human-related cyber risk in a meaningful way?

This session moves the conversation beyond activity and into impact. Beyond awareness and into behaviour. Beyond compliance and into capability.

You will walk away with:​

• A clearer understanding of why current approaches are not delivering the expected results. 
• Practical insight into what success and best practice looks like in real environments.
• Different ways to think about strategy, engagement and measurement.
• The confidence to question your own approach and design programs that reflect your organisation, not the industry narrative.

This session is for those who are ready to move past ticking the box and start addressing human risk in a way that actually works. No single answer. No one-size-fits-all model. Just three perspectives, one shared problem, and a more honest path forward.