Program Sikkerhetsfestivalen 2026

Culture & Awareness

The Average Employee Doesn’t Exist: Measuring Security Culture in Practice

Tirsdag 6 · Lillehammer kino, sal 4

EnglishHigh-level 40 min

Thea Mannix

Thea Mannix

Director of Research

Thea Mannix is a neuroscientist and researcher with over 5 years experience working in cybersecurity and human risk management. Currently the Director of Research at Praxis Security Labs, she specialises in applying psychological theory and analysis methods to digital environments.

If you have two legs, you have more than the average number of legs. That’s a technically true statistic - and a reminder that 'true' can still be misleading. This is becoming more common within security culture and risk metrics as the field develops: benchmarks and KPIs have the potential to hide what’s really changing, and organisations struggle to find metrics that actually capture reality. In this talk, I’ll break down the most common (and some less common) statistical traps behind culture and risk measurement, show how to strengthen the metrics you already use, and share a baseline first way to help you more reliably track progress over time.

  1. Your Agents Have Trust Issues: Securing AI in the "Wild West" of LLMs 1 · Frimurerlosjen, rom 1
  2. Role Confusion in DNS 1 · Frimurerlosjen, rom 2
  3. Riv PKIene 10 · HeartBox ,Teatersalen
  4. Security at Scale: Lessons learned from Equinor’s Security Configuration Initiative 10 · HeartBox, Byscenen
  5. Digitale spøkelser: KI agenter uten kontroll i norske virksomheter 11- Breiseth, Storlon
  6. OT-sikkerhet i matbransjen – noen erfaringer 2 · Home hotel Hammer, moen nede
  7. Sertifiseringen deres stopper meg ikke i døra! - Fysisk sikkerhet fra papir til praksis 2 · Home hotel Hammer, moen oppe
  8. Ingunn Nesheim 3 · Hvelvet, Gullsalen
  9. Fra kontroll til samarbeid: Slik bygger vi reell sikkerhet i leverandørrelasjoner 4 · Kommunestyresalen, Lillehammer rådhus
  10. Vet du hvor mange som jobber for deg? AI-agenter som risiko og en styringsmodell som virker 5 · Kulturhuset Banken, Expedisjon
  11. Cyberoperasjoner som sikkerhetspolitisk virkemiddel 5 · Kulturhuset Banken, Festsalen
  12. AI-empowered Digital Twin-based Security Orchestration, Automation and Response 5 · Kulturhuset Banken, Holbøsalen
  13. Cloud Forensics: Challenges and Best Practices 5 · Kulturhuset Banken, Kafeen
  14. Slutt å late som du jobber risikobasert! 6 · Lillehammer kino, sal 2
  15. State of the Union: AI in Security 2026 7 · Microbryggeriet
  16. Nobody Cares About Your Intel (Until They Do): Lessons from Building CTI That Sticks 9 · Victoria Scandic, sal 1+2
  17. Phishing dekonstruert: Hva virker og hva kan vi lære av det? 9 · Victoria Scandic, sal 3