Cybersecurity Culture & Human Behaviour course (CYRUS)
This course, created as part of the CYRUS project, empowers learners with the knowledge they need to learn how to build resilient cybersecurity cultures, distinguish the human role in cyber risks, and manage crisis communication effectively. CYRUS is funded under the DIGITAL Europe Programme of the European Union and aims to create a blueprint for building tailored learning experiences in cybersecurity across industrial sectors - promoting not only skills development, but also up- and re-skilling. CYRUS stands for "a personalised, customised, work-based training framework for enhanced CYbeRsecurity skills across indUstrial Sectors".
Why this course?
The human factor plays a critical role in cybersecurity: employees may be the primary target of cyberattacks, but also act as the first line of defence, sometimes called the "human firewall". Well-trained employees with security awareness can help prevent malicious incidents. This course is designed for non-technical professionals - from HR or supply chain managers, to purchasing officers and office workers - aiming to improve their understanding of cybersecurity risks and response strategies. The course is split into 2 parts.
- Part 1 tackles the nature of the human factor in cybersecurity, analysing real-world cybersecurity incidents to demonstrate why human behaviour is often considered the weakest link in an organisation's security chain. Here, learners are prompted to differentiate between diverse types of human failures by exploring the roles of both users and attackers.
- Part 2 covers crisis communication and also the skills learners need to communicate effectively during and after a cybersecurity incident has occurred. This includes crafting clear, timely and coordinated messages to maintain organisational trust and reduce the impact of potential damages.
Learning outcomes
Upon successful completion of this course, participants will:
- Gain insights into the role of human behaviour in cybersecurity and dynamics between user and attacker;
- Analyse past cybersecurity incidents to understand why humans are often considered the weakest link in security.
- Learn to utilise various tools and methodologies to mitigate human error and enhance security measures.
- Understand the importance of a just culture and reporting in fostering a proactive cybersecurity environment and preventing future incidents.
- Develop effective communication strategies for use during and after a cybersecurity incident, ensuring compliance with GDPR and maintaining stakeholder trust.
Head over to the course
The training is free of charge and offered as self-paced e-learning available on demand (duration approximately 2 hours) from April 2025 to October 2025. It is also available as an online instructor-led session on the following dates (duration: approximately 4 hours).
Click here to access this course!
