The security culture programme that this publication has described invests substantially in the awareness, training, and behavioural architecture that prepares the workforce to make good security decisions across the full range of security-relevant situations they encounter in their daily work. The persistent gap between security knowledge and security behaviour that the human-centric security sections have addressed reflects the fundamental challenge that preparation for security decisions and the actual security decisions themselves are separated by the time, context, and cognitive conditions that make the recall and application of training insufficient for the consistent security behaviour that the programme requires.
Just-in-time security nudges address this gap by intervening at the precise moment of the security-relevant decision rather than before it, providing the contextual security guidance that the individual’s immediate situation requires at the point where that guidance most directly affects the outcome. The JIT nudge does not rely on the individual’s ability to recall the training session’s content when the security-relevant decision arises. It presents the security consideration at the decision point itself, converting the knowledge that training has built into the immediately actionable guidance that the specific decision context requires.
The ISO must govern the JIT nudge programme as a distinct but integrated component of the security culture programme rather than a technology deployment that operates independently of the cultural and awareness investments the programme has made. The nudge that arrives without the cultural foundation that has established its purpose will be experienced as the intrusive obstacle that the workforce dismisses or routes around. The nudge that reinforces the security values and behavioural standards that the culture has already established will be experienced as the helpful contextual support that the security culture genuinely provides.
Why Traditional Training Cannot Close the Knowledge-Action Gap Alone #
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
