How the LEGO group is rethinking behaviour change and human-centred cyber security, with Ceri Jones.

If there’s one thing Ceri Jones knows, it’s what doesn’t work in training.

Throughout her career in cyber security, working alongside several psychologists, she’s discovered that telling people what to do is anything but simple. Behaviour doesn’t always follow knowledge, and nudges in the flow of work can be detrimental to productivity.

It’s a deeply thoughtful and people-first perspective, and Ceri explains why expecting people ‘to just do’ the rules is a flawed approach that ignores the person, their environment, their emotions, habits, and mindset - which all play a role in the actions we actually take.

Ceri is a realist, and advocates treating learners as adults, learning to listen, using positive messaging and not being afraid to challenge norms: all principles that we can explore and benefit from as learning leaders across any discipline - cybersecurity, or otherwise.