All Events and Webinars

The Impact of AI Security Culture and Insider Threats Webinar

Cross Industry
Phishing and Social Engineering
AI and Emerging Technology
Threat Actors and Campaigns
July 12, 2025
AI is making cyber threats more convincing, scalable, and harder to detect, especially when it comes to phishing and social engineering. This session explores how organisations can adapt by combining smarter detection with stronger security culture. Viewers will learn how to reduce human risk through behavioural insights, real-time coaching, and training approaches that actually change how people respond.

In-House Specialists

Robert Kehoe

Chief Technology Officer

External Speakers

James Sheldrake

Head of Innovation

Bas Van Den Hoeven

Sales Engineer

Key Strategic Takeaways

Is Insider Threat a Behaviour Problem and Not Just a Malicious One?

Most insider-driven incidents are not caused by malicious intent but by negligence, workarounds, or compromised accounts. In practice, these categories overlap, with users often taking risky actions to get their jobs done under pressure. Organisations need to focus on understanding behaviour and context, not just classifying incidents, to reduce risk effectively.

Does Risky User Behaviour Signal Broken Processes?

When employees bypass controls, it often reflects friction in tools, workflows, or policies rather than deliberate non-compliance. Shortcuts like emailing files to personal accounts usually indicate that secure alternatives are missing or impractical. Fixing these gaps requires aligning security controls with how people actually work, making the secure path the easiest path.

Has AI Made Social Engineering Scalable and Convincing?

AI is dramatically increasing the realism and scale of phishing, voice impersonation, and deepfake attacks, turning highly targeted scams into repeatable operations. Real-world cases show attackers successfully impersonating colleagues in live interactions to trigger high-value fraud. Defence must evolve beyond traditional detection, combining user awareness, behavioural analysis, and real-time intervention to counter increasingly authentic threats.

Does Security Culture Fail When Reporting Feels Risky?

Employees often delay or avoid reporting incidents due to fear, embarrassment, or perceived reputational damage, even when no formal punishment exists. This delay increases the impact of attacks and reduces the organisation’s ability to respond quickly. Building an effective security culture means removing stigma, rewarding early reporting, and treating mistakes as part of the defence process rather than a failure.

Does Continuous, Contextual Training Outperform Static Awareness?

Annual training programmes are no longer effective against AI-driven threats that evolve rapidly. Leading organisations are combining real-time detection, contextual nudges, and adaptive training based on actual user behaviour. This integrated approach creates a feedback loop where users learn in context, reducing risk without overwhelming them or disrupting productivity.

Is Insider Threat a Behaviour Problem and Not Just a Malicious One?
Does Risky User Behaviour Signal Broken Processes?
Has AI Made Social Engineering Scalable and Convincing?
Does Security Culture Fail When Reporting Feels Risky?
Does Continuous, Contextual Training Outperform Static Awareness?
  • 00:00 Introduction to humans, machines, and insider risk in the AI era
  • 02:02 The three types of insider threat: malicious, negligent, and compromised users
  • 03:36 Why insider threat categories often blur in real organizations
  • 05:02 Risky behaviour as a sign of broken processes and poor security culture
  • 06:08 How AI is changing phishing, deepfakes, and social engineering attacks
  • 08:59 Why AI makes attacks faster, cheaper, and more scalable for threat actors
  • 11:07 Why positive security culture often breaks down after an incident
  • 13:23 Why punishment weakens reporting and damages security outcomes
  • 19:26 Security champions, governance, and practical ways to improve culture
  • 20:10 How training, simulations, and nudges reduce insider risk over time
  • 26:06 Demo: real-time coaching, phishing detection, and adaptive training workflows
  • 41:17 Final advice: embrace AI, build layered security, and strengthen culture
Watch More
AI and Cybersecurity

Seasonal Cybersecurity Risks for Transport Webinar

Smarttech247 leaders discuss transportation cybersecurity, focusing on OT security, digital twins, evolving threats, third-party risk, and resilience.

HSE Ransomware Attack and the Future of Cybersecurity in Ireland

Cybersecurity leaders discuss the HSE ransomware attack and a path forward for Ireland, focusing on resilience, regulation, maturity models, and public awarenes

Ransomware Cyber Attack Simulation Webinar

Attack simulation showing a multi-stage ransomware campaign and how Cybereason detects, correlates, and responds to fileless and living-off-the-land techniques.

Ready to scale your security and compliance operations?

We protect your on-premise/cloud/OT environments - 24x7x365