About the course
Information security is not only about technology, policies, and regulations – it is ultimately about how people behave in their everyday work. Most security incidents are caused by human actions such as shortcuts, misjudgments, or unclear responsibilities. At the same time, the human factor represents the greatest opportunity to strengthen security in a sustainable and effective way.
The course combines theory, reflection, and practical examples tailored to the participants’ own organizational context, enabling them to continue the work independently after the session.
Content
- Understand the role of the human factor in information security
- Increase awareness of why security incidents occur in everyday work
- Introduction to a behavior-focused approach and what truly influences human behavior
- Understand the difference between attitudes, traits, and behaviors
- Understand the relationship between culture, behavior, and outcomes
- Learn the principles behind behavior change and how they can be applied in practice
- Identify behaviors that are particularly critical to information security
- Discuss how organizations can make it easier and more rewarding to “do the right thing”
- Reflect on responsibility, culture, and shared ownership in security efforts
Längd
3 h
Course type
The course is customized for closed groups. It can be conducted on-site or digitally.
Target audience
This course is designed for organizations seeking to increase knowledge, awareness, and engagement around information security. It is particularly suitable for managers, leaders, security professionals, key roles, and teams who want to understand the human factor and gain practical insights to strengthen their information security culture. No prior knowledge is required, and the course is applicable across both business and support functions.

