Stream 1
Cybersecurity for SMB and not-for-profits
For the small businesses, charities, faith-based organisations and independent schools we serve, what most determines their cyber risk usually isn’t which product they bought — it’s the patterns, behaviours and conditions inside the organisation: how people actually work, the shortcuts that creep in, the conditions that let risk quietly build. Security bought as a tool and then forgotten doesn’t hold. Real security is a state of mind, not something you outsource to software.
Our research in this stream asks: which patterns, behaviours and conditions actually drive a small organisation’s cyber risk and posture — and what strategies measurably shift them?
- Identifying the behaviours and conditions that predict real risk — not just the absence of a tool.
- What actually changes an organisation’s posture — habits, defaults and culture — versus what only looks like security.
- Strategies that make the safe path the easy, default path, so good security holds without a dedicated team.
- Turning security from a product you buy into the way a whole organisation thinks and works.