I’m going to be talking about people-centred security research in CESG and later, the NCSC. I’m going to tell you what we’ve learned about the best ways to engage with people in terms of security training, education and awareness, and how these factors fit into a successful overall approach to engaging and supporting people to be the best assets they can be to your organisation’s cyber security. I’m going to tell you something of the change journey that we have been on over the past 5-6 years – what we think now, how we got here, and what we’re now doing in terms of sharing our thinking with everyone else.