Webinar Description
Key Takeaways
- Collaborative initiative developing a vendor-neutral ontology for mapping human behaviour to cybersecurity threats, vulnerabilities and controls
- Designed for CISOs, human risk managers and senior security culture practitioners
- Addresses the absence of systematic approaches and common terminology for reasoning about behavioural risk
- One-hour virtual session with discussion-led, collaborative format
- All outputs openly licensed to encourage broad adoption
About Project NEXUS
Project NEXUS is a collaborative research initiative working to establish a systematic framework for understanding behavioural risk in cybersecurity. The project brings together senior practitioners and researchers to develop an ontology that connects human behaviour to threats, vulnerabilities, controls and risk outcomes. Organised by CybSafe, the initiative operates on a vendor-neutral basis with all contributions openly licensed.
Framework Development Focus
The central objective is creating a common language for the cybersecurity field to reason about how behaviour impacts security. The ontology under development maps relationships between human actions and security outcomes, providing a foundation for more effective interventions and risk management decisions. The project positions behaviour as the connecting point across security domains, aiming to unite practitioners around shared definitions.
The Problem of Behavioural Risk
Organisations currently lack systematic methods for understanding how human actions influence vulnerabilities and control effectiveness. Project NEXUS addresses this gap by developing structured approaches that enable security teams to analyse behavioural factors with the same rigour applied to technical risks. The framework aims to improve how organisations assess and manage the human element of their security posture.
Who Should Attend
The session is suited to CISOs, human risk managers and security culture leaders responsible for managing human risk within their organisations. Professionals in security, risk and compliance departments will find value in the collaborative framework development, particularly those working in organisations that prioritise behavioural security. The open format welcomes contributions and feedback from the wider community.