Organizations have historically relied on the effectiveness of the technical security controls, instead of trying to understand why people are susceptible to mistakes and manipulation. As a result, organizations are struggling to manage the risk of what is called the ‘accidental insider’ – the legitimate employee making errors. Cybersecurity experts argue that human beings are the weakest link to the security of any IT system. 88% of data breaches reported to the UK information Commissioner’s office in 2018 were attributed to human error, rather than vulnerabilities in the underlying technologies (ISF Research,2020). Behaviour is an important factor in cybersecurity. Employees are often the weakest link to cybersecurity and are targeted by cyber criminals. At TCT we strongly believe in a human-centric security approach where people are put at the front and at the centre of a cybersecurity strategy is critical in realising the benefits of cybersecurity.