The security culture programme described throughout this publication has been built on the evidence base of what human psychology, behavioural science, and organisational development research has established as most likely to produce genuine and sustained security behaviour change across the workforce population. Artificial intelligence represents the technological evolution that has the potential to deliver the programme’s design principles at a scale, precision, and adaptability that the human-delivered and manually governed programme cannot match, addressing the persistent limitations of the traditional security awareness model through the personalisation, continuous delivery, and adaptive responsiveness that AI-driven platforms make operationally achievable.
The ISO must govern the integration of AI into the security awareness and training programme with the same evidence-based discipline applied to every other programme design decision, assessing the specific capabilities that AI genuinely provides against the specific programme challenges they address and the specific governance, privacy, and ethical considerations that their deployment creates. AI in security training is not the universal solution to the human security challenge that the technology’s most enthusiastic advocates sometimes present it as. It is the powerful capability enhancement that, deployed thoughtfully within the programme’s strategic framework, can materially improve the programme’s effectiveness across several dimensions that traditional approaches address inadequately.
Personalised Learning at Scale #
The most significant limitation of the traditional security awareness programme is the tension between the personalisation that genuine relevance demands and the scale that the full workforce population’s coverage requires. The role-specific content, the audience-calibrated difficulty level, and the individual knowledge gap targeting that the programme’s effectiveness most benefits from are practically achievable for small audience segments but resource-prohibitive when manually designed and delivered across the full workforce population’s diversity.
Keep reading with a free Eristotle account.
Every document across our Bodies of Knowledge is free to read once you are signed in. No payment, no tier.
