Infosec Manchester 2026

Event Title:

The Security-First Culture: Data, Design, and Engagement

Abstract:

Turning Insights into Action: The Culture Shift

In modern cybersecurity, technical controls are only as effective as the culture that supports them. How do we move beyond “check-the-box” compliance to create genuine, lasting resilience? This session dives into the art and science of security culture transformation. We’ll explore how to harness behavioural data to identify real risks, moving away from gut feelings and toward evidence-based strategies that actually move the needle. By treating security as a data-driven cultural initiative rather than just a set of rules, you’ll learn how to quantify the human element and empower your workforce to be your most proactive security asset.

Security by Design: Making it Stick

Building a resilient organisation requires more than just better tools; it requires better conversations. Our speakers will break down barriers between IT and the wider business and share proven methods for embedding Security by Design across every department—from HR to Marketing. We’ll ditch the dry, jargon-heavy lectures in favour of creative, high-impact communication strategies that make security education both accessible and effective for any audience. Whether you’re looking to win over cynical stakeholders or inspire your frontline staff, this session provides the blueprint for building a collaborative environment where security is a seamless, natural part of the workday.

Key Talking Points

• Move Beyond Metrics to Meaning: Learn how to transform raw behavioural data into actionable insights that influence board-level decisions and drive long-term cultural change.
• The “Security by Design” Social Contract: Discover practical frameworks for engaging non-technical business units (such as HR, Sales, and Marketing) to bake security into their workflows without creating friction or “no-go” zones.
• The Death of the Boring Slide Deck: Gain a toolkit of creative communication techniques and gamification strategies that make security awareness memorable, inclusive, and—dare we say—genuinely fun for diverse audiences.
• From Barrier to Enabler: How to shift the internal perception of the security team from the “Department of No” to a vital partner in business growth and innovation.