#behavioral security

Cyber Risk

The COM-B Model: Understanding Why Clinical Staff Bypass Security Controls and Evidence-Based Interventions

Clinical staff circumvent security controls not from malice, but from systemic barriers to capability, opportunity, and motivation. The COM-B behavioral change framework offers healthcare CISOs a structured, evidence-based approach to addressing the human factors that drive security gaps.

Cyber Risk

Nudge Architecture for Healthcare IT: Making the Secure Option the Easiest Option

Behavioral economics meets cybersecurity in healthcare. Nudge architecture—the strategic design of choices to encourage secure behavior—can reduce risk more effectively than mandates alone. This post explores how CISOs can implement evidence-based nudges within clinical workflows.

Cyber Risk

COM-B Behavioral Change Model: Why Clinical Staff Bypass Security Controls and What to Do About It

Clinical staff don't bypass security controls because they're careless — they do it because the behavioral conditions for compliance aren't in place. The COM-B model gives CISOs a structured, evidence-based framework to diagnose and fix the root causes of insecure clinical workflows.