Melissa G.

Great point, Florian A.! When leadership sets the standard, no exceptions, it can send a clear message to the whole organisation. How are you approaching executive accountability in your organisation? 💡

That's a great way to put it Sabrina H.: feeling intrinsically motivated, not just compliant. Resilience definitely comes in when employees feel empowered and safe to report threats. Would you say psychological safety plays an even bigger role in this? Monika G. Arne B. Markus P. what is top of mind for you? Are the thoughts from Sabrina resonating perhaps ? 💭

Thanks for kicking us off, Andrew! 🚀 What stood out to me is the tension between trust and control. Most organisations want to give people the flexibility to do their jobs, but where exactly to draw the line is often much less clear in practice. I'm curious how others are approaching this: Markus P. Roald R. Thomas B. Robert K. Lars S. have you found a balance that works well in your organisation?

Thanks for sharing the behind-the-scenes insights,Robert K., super valuable to see those analytics side by side. A 74.2% reporting rate is impressive. Also great to see that you’re directly feeding the survey results into the next 12-month campaign cycle! 👏

🔗 This is the post Robert published some time ago, here you can find the questions and some more on the survey. .

I also remember you joining the Q&A after Jannekes session around e-learning completion rates at HuFiCon last year, so it’s really interesting to see your own results and approach here as well. Curious to hear from others in the community Markus P. Aljoscha T., Christian E. Kim H.: Have you found certain initiatives, campaign approaches particularly effective for improving completion or reporting rates over time? 👀

Robert K. thank you sharing your perspective too!! 💯 Really interesting, especially what you mentioned, that the human line of defence can detect incidents before technical controls do. That shifts the conversation from “employees as the weakest link” to employees as active sensors! And totally agree on the ownership aspect too, giving people clear responsibility seems to make a huge difference. The risk owner/ process owner model is a really strong example of that. 👏 Curious what others might think Luke Q. Markus P. Matthias R. Thomas B. - looking forward to hearing your thoughts on the conversation too!

Really interesting point, Lars S., especially what you mentioned, that the reaction time should depend/ is linked on how concrete and immediate the risk is. It raises a tricky question though: even if we know a risk is high and urgent, many organisations struggle to translate that into immediate action, especially when it comes to human behaviour. 💭 Sabrina H. Jochen S. Monika G. Robert K. curious how you see this, is this mainly a process integration issue, or an execution gap between risk awareness and action?

💭 Markus P. Thomas B. Sabrina H. Lars S. Aljoscha T. would love your perspective here - what’s typically driving this kind of delay in your experience? 👀