SoSafe Blog

Compliance

17 September 2025 · 9 min read

8 steps to build a NIS2-aligned security awareness programme

NIS2 has moved the goalposts: training hours and attendance sheets no longer cut it. Regulators want proof that people can spot threats, act fast, and avoid costly mistakes. But how do you measure something as everyday as cyber hygiene? In this piece, we break down ENISA’s guidance into eight practical steps, from building an evidence trail to making awareness stick. If you’re wondering how to turn compliance pressure into real security culture, this guide shows you where to start.

5 foundations of cybersecurity in a large organisation

10 min read

Cyberthreats

5 foundations of cybersecurity in a large organisation

Cyber risk is growing faster than ever, with recent data showing human error involved in most breaches, highlighting the importance of people-centric security. Large organisations need a strong cybersecurity foundation. Discover the most important controls to counter unwanted intrusion that could compromise sensitive data, steal IP, impact customers, or damage your reputation.

What the UK’s New Cyber Governance Code of Practice Means for Your Board — and Why Culture is the Key to Compliance

3 min read

Compliance

What the UK’s New Cyber Governance Code of Practice Means for Your Board — and Why Culture is the Key to Compliance

All it takes is one person to start the domino effect. This is what happened when one individual filed a case about his data being processed in another country. This re-opened the conversation about data privacy and the impact it has on companies and consumers. Are policies enough, especially if the control rests with the government?

Ilona Simpson on digital resilience and the need for change management in cyber security

3 min read

Podcast

Ilona Simpson on digital resilience and the need for change management in cyber security

Why are traditional training models not enough to create real behaviour change in employees? Join the Human Firewall podcast as Dr. Niklas Hellemann and Ilona Simpson discuss moving beyond generic training to a personalized approach that considers individual learning needs and motivations.

Personalized solutions for evolving threats: Product innovations revealed at HuFiCon 2024

7 min read

Product

Personalized solutions for evolving threats: Product innovations revealed at HuFiCon 2024

HuFiCon 2024 introduced groundbreaking innovations to elevate your security strategy. From personalized e-learning tailored to the specific risks employees face in their roles and the new Simulation Studio for crafting targeted simulations, to smishing protection to defend against multi-channel attacks. Ready to find out how to create true cyber security resilience?

Scale your security
culture with ease

Get started

SoSafe named a Strong Performer in The Forrester Wave™: Human Risk Management Solutions, Q3 2024

7 min read

Human Risk Management

SoSafe named a Strong Performer in The Forrester Wave™: Human Risk Management Solutions, Q3 2024

“Organizations that have to balance privacy with innovation should look to SoSafe” – states the inaugural Forrester Wave™: Human Risk Management Solutions, Q3 2024 report. We are proud to announce that SoSafe has been recognised as a Strong Performer in Human Risk Management in an evaluation across three categories: current offering, strategy, and market presence. Read the article to learn more!

How to successfully run a simulated phishing campaign in 6 steps

13 min read

Human Risk Management, Phishing Simulations

How to successfully run a simulated phishing campaign in 6 steps

Want to make your team phishing-proof? Phishing simulations can be your best bet, but they must strike the right chord with your employees. Read our six-step article to learn how to fine-tune the relevance, frequency, and content of your simulated emails and turn your team into phishing detection champions.

What are the biggest cyberthreats facing the healthcare sector?

14 min read

Cyberthreats

What are the biggest cyberthreats facing the healthcare sector?

Their limited resources, sensitive data, and the urgent need to restore operations make healthcare a prime target for hackers. From conducting ransomware attacks to exploiting IoT vulnerabilities, hackers use the most advanced tactics to take advantage of security weaknesses, putting patient data and safety at risk. Do you want to know their main tactics and how to protect against them? Keep reading!

From blame to empowerment: How positive reinforcement can transform your security culture

10 min read

Behavioral Science

From blame to empowerment: How positive reinforcement can transform your security culture

Do you want your employees to feel empowered and motivated to protect your organisation or silent and fearful of the consequences they face when they make a mistake? It’s time to move from pointing fingers to motivating employees to learn about secure behaviours through positive reinforcement. All this, while building a “just culture” where employees feel empowered to talk about their mistakes – and where human error is seen as an opportunity to improve processes within the organisation.

Scale your security
culture with ease

SoSafe Blog

Compliance

8 steps to build a NIS2-aligned security awareness programme

5 foundations of cybersecurity in a large organisation

What the UK’s New Cyber Governance Code of Practice Means for Your Board — and Why Culture is the Key to Compliance

Ilona Simpson on digital resilience and the need for change management in cyber security

Personalized solutions for evolving threats: Product innovations revealed at HuFiCon 2024

Scale your securityculture with ease

SoSafe named a Strong Performer in The Forrester Wave™: Human Risk Management Solutions, Q3 2024

How to successfully run a simulated phishing campaign in 6 steps

What are the biggest cyberthreats facing the healthcare sector?

From blame to empowerment: How positive reinforcement can transform your security culture

Scale your securityculture with ease

Ralf Schumacherlive at HuFiCon 2025

The human risk platform that deploys in days, not months

Experience our products first-hand

Scale your security
culture with ease

Scale your security
culture with ease

Ralf Schumacher
live at HuFiCon 2025