Insights
Evidence-led perspectives on human risk, security culture and the regulators who ask about them.
Your next audit won't ask about deepfakes. Your next attacker will.
A gap analysis of 78 regulator documents: no binding rule trains staff for a deepfake call. What regulators already recommend, and how to be ready now.
The live call can now be faked
In June 2026 most people spotted an AI on a live video call within seconds. In October a company test said about half did not. What still works when you cannot trust the face on the screen.
The fake you were trained to spot is gone
Research published since the start of 2025 shows people and detectors can no longer reliably spot deepfake voices and video, and that falling losses come from rehearsed verification, not sharper eyes.
Awareness is not behaviour
What the largest workplace studies say about changing security behaviour, and five shifts that build a culture where people verify, report and speak up.