Redflags.’s cover photo
Redflags.

Redflags.

Computer and Network Security

London, England 3,111 followers

Next generation security awareness

About us

A UK company developing products that reinvent the delivery of end-user security education and awareness training.

Website
https://redflags.io/
Industry
Computer and Network Security
Company size
11-50 employees
Headquarters
London, England
Type
Privately Held
Founded
2016
Specialties
Cyber Security, Security Education, Security Awareness Training, and Behavioural Science

Locations

Employees at Redflags.

Updates

  • Redflags. reposted this

    London was looking… well Londoney last week, walking back from SASIG Events’ GRC event. An event where it was really apparent that big shifts are taking place in governance risk and compliance. Best practice has always been to focus on measurable outcomes and not just tick box activity. But NIST 2.0 and the cyber resilience bill push this agenda faster. Outcomes > activities → evidence of risk reduction matters, not training completion Behavioural cyber risk → human actions are treated as both risk drivers and risk controls Continuous improvement → maturity assessed over time, not point-in-time Integration of governance, policy and operations → policies must be understood and applied by people in real situations In practical terms: Organisations should no longer be assessed on “delivering” training But must now prove: - People recognise real threats - People behave securely in context - Incidents are reported correctly and quickly - Human behaviour measurably reduces risk This shift is pretty fundamental and is going to need the tooling to measure and intervene right place, right time, right way. Luckily we are ahead of the game :-) Redflags.

    • No alternative text description for this image
    • No alternative text description for this image
    • No alternative text description for this image
  • Redflags. reposted this

    This is really fascinating. While I use several different AI’s, Chat GPT is not my go to except when I’m using it in other services like Copilot or in Perplexity Computer (for orchestrating tasks) or talking to it using CarPlay while I’m in the car. What’s your chosen AI tool and why?

    View organization page for Redflags.

    3,111 followers

    In our latest Behavioural Impact Report, we explored which AI websites rank highest for workplace usage and how those patterns are shifting inside organisations. Despite the eye rolls and growing criticism, OpenAI’s ChatGPT still sits comfortably at the top as the most visited AI website. Meanwhile, platforms like Google Gemini, Anthropic Claude and DeepSeek are still playing catch-up. Our experts looked at the AI usage metrics tracked by Redflags. customers to see where governance was having an impact on digital behaviours. In some organisations, usage patterns fell in line with clear rules around which AI tools employees are permitted to access. In others, employees were actively searching for workarounds as a result of mounting pressures (e.g., increased workload, fear of being replaced, etc). If you’re a cyber security professional who feels like you're playing a game of whack-a-mole - every time one AI site is blocked, another immediately appears in its place - and want to shape safer behaviours and not just secret ones, this report is for you. 📚 FULL REPORT: https://hubs.la/Q04gW4st0 🗣️ Contributors: Tim Ward, 🐡 Lucy Finlay CISM, George Ponder, Melanie Knight, Phoebe P. and Noah Browne. 🎨 Design Credits: Lisa Raynaud

    • No alternative text description for this image
  • View organization page for Redflags.

    3,111 followers

    One of the standout findings from our Behavioural Impact Report showed that 'just 3% of users are responsible for 18% of all AI-related events'... That’s a lot of heavy lifting from a very small group! 🏋️ Most organisations are trying to manage AI through policy, approved tools, and acceptable use guidelines, which isn't a bad approach on the surface. The challenge is that these frameworks are usually designed around the average user. This 3% isn’t average… They move faster, experiment more, make decisions in the moment and often push tools further than anyone expected. There can be a haste to label this behaviour as reckless or nefarious, but that’s rarely the case. Most employees turn up to work and try to get the best job done in the most efficient way; they aren't trying to mastermind Watergate. In many instances, these users are the trailblazers showing us where behaviour is heading next. So this "problematic" 3% may not be a problem at all, but a signal to pay closer attention 👀 📚 FULL REPORT: https://hubs.la/Q04jkVXR0 🎨 Design Credits: Lisa Raynaud

    • No alternative text description for this image
  • View organization page for Redflags.

    3,111 followers

    We have UNLIMITED spaces left on our LinkedIn Live talk!!! Sign up now or don’t. Waiting longer to register won't jeopardise your place in the slightest. You can do it tomorrow instead, or even on the day… As you can probably tell, sales patter isn’t really our strong suit, but we do put on a damn good talk about ‘What Happens When AI Changes Behaviour Faster Than Cyber Governance Can Keep Up’, featuring Tim Ward (CEO and co-founder of Redflags.) and 🔐 Daniela W. Waugh (Head of Information Security at S&W Group). Webinar details: Date: 2nd June 2026 Time: 3:15pm – 3:45pm GMT Location: On your mobile device OR at Infosecurity Europe 2026, Booth B104 (if you’re attending in-person. ✍ Register here: https://hubs.la/Q04jlFtJ0

    • No alternative text description for this image
  • View organization page for Redflags.

    3,111 followers

    Yesterday’s SASIG Events brought together three of the biggest, interconnected terms in the cyber security industry: Compliance, Risk and Governance. Naturally, we sent along three big, interconnected names of our own in the form of Tim Ward, Phil Guest and Laura Katharina Oertel. The venue was packed with sharp minds, strong coffee and enough conversations about governance frameworks to make even the Wi-Fi feel compliant! Our CEO, Tim Ward, took to the stage to talk about quantifying change in cyber security behaviour and why human factors matter far more than most organisations realise. The room warmed up pretty quickly too. Now, yes, the UK is currently enduring a heatwave, but we’re choosing to believe that was entirely down to Tim’s passionate talk 🔥 Tim explored how motivation, ability and prompts all play a huge role in cyber defence, sharing practical examples along with findings from our latest report to show how behaviour change can be achieved and the real impact it can have. 📚 FULL REPORT: https://hubs.la/Q04gW4st0 Huge thanks to SASIG for hosting such a fantastic event and creating space for these important conversations. And of course, a big thank you to all the other speakers and contributors on the day for sharing their insights and expertise.

    • No alternative text description for this image
    • No alternative text description for this image
  • Redflags. reposted this

    Yesterday’s SASIG Events event was on Governance, Risk and Compliance: From Security measures to resilience. Many thanks to SASIG team and particularly, to Liz Murray for chairing sessions in such an engaging way and for masterfully steering the event. Big thanks to Arunava Banerjee CISM Banerjee and team of Zurich Resilience Solutions UK for providing a great venue!   The event had great presentations and full of important discussions. I will reflect on couple of presentations. One by John Stevenson from CoreView who explained to us what the Spanish Armada has to do with cyber resilience for those organizations using Microsoft 365. Some key takeaways from John’s presentation: ·     Configurations drift is one of the top cloud security threats. Organizations should keep an eye on configurations to detect any undesirable tampering with it. ·     Think how your organization backup environment. ·     Check privileges. Seamless collaboration offered by Microsoft365 should not come at expense of unnecessary oversharing and granting admin access purely out of convenience. Another talk is by Andy Papastefanou of Talanos Cybersecurity. Andy shared valuable lessons from experience of his team on the power of clear, relevant, timely story telling when discussing cyber risk quantification with non techy audience. Tim Ward of Redflags. Flags talked on quantifying change in cybersecurity behaviour. Among other items Tim’s presentation covered great examples of how motivation, ability and prompt, are of high relevance for organizations when it comes to  human factors of cyber defence. And that behaviour change can be quantified.

    • No alternative text description for this image
    • No alternative text description for this image
    • No alternative text description for this image
  • View organization page for Redflags.

    3,111 followers

    We’ve been receiving complaints from customers saying that they’re bored because their teams aren’t engaging with phishing emails and are actually taking time to inspect links before clicking them. This means fewer incidents for their security teams to write emails about and budget carrying over into the next financial year because they haven’t lost as much of it to breaches as they’d forecasted. It’s sorry state of affairs and we’re responsible for it. Book a demo if your day job as a cyber security professional has become a bit too exciting and you’re looking for a touch more of the mundane. We can help with that 😴 https://hubs.la/Q04gWtG50

    • No alternative text description for this image
  • Redflags. reposted this

    🚀 Emerging Technologies: Opportunities and Challenges Join us in London for a dynamic SASIG event unpacking how AI, privacy enhancing tech and emerging innovation are reshaping the cybersecurity landscape. Hear from industry experts on where AI goes wrong in the real world, how attackers are evolving, and what organisations must do to stay ahead. 🎤 Speakers include: Florian POUCHET (Wavestone), Nigel Smart (KU Leuven), Tim Ward (Redflags.), Nils Amiet (Kudelski Security), Mark Davis (Pentera), Alex van Someren (Paladin Capital Group), David Porter (Bank of England) and Mark Howell (Censys). 📅 Thursday 25 June 2026 | 🕘 9.30am - 4pm 📍 London 🎟️ Free to attend - registration required 🥪 Lunch and refreshments included 👉 Register now: https://lnkd.in/e_zA7mCU #CyberSecurity #AI #EmergingTech #CyberRisk #SASIGEvents

    • No alternative text description for this image
  • Redflags. reposted this

    View organization page for SASIG Events

    5,970 followers

    🌟 Governance, Risk and Compliance: From Security to Measured Resilience   We’re in sunny London today, kindly hosted by Zurich Resilience Solutions, for a full day of discussion on how organisations can move beyond compliance and towards true, measurable resilience.   This morning’s sessions are already setting the tone, exploring how the wave of new regulation (from NIS2 and DORA to the UK Cyber Security and Resilience Bill) is reshaping the way organisations think about governance, risk and compliance.   🎤 With insights from Arunava Banerjee CISM (Zurich Resilience Solutions) and Oz Alashe MBE (CybSafe), we’re tackling critical questions, including: ✅ How to move from checkbox compliance to systematic cyber resilience ✅ Why traditional risk approaches are no longer enough in a regulated landscape ✅ The growing gap between technical and behavioural risk visibility ✅ What it takes to build measurable, outcomes-driven security programmes   💡 A key theme emerging: Resilience isn’t just about frameworks, it’s about embedding governance and risk practices across organisations and supply chains to drive real-world impact.   📌 This afternoon: 🎤 We are joined by more industry experts, including Adam Steeden (Zurich Resilience Solutions), Andy Papastefanou (Talanos Cybersecurity), Kay Hargreaves (Zurich Insurance), Tim Ward (Redflags.), John Stevenson (CoreView), Sharon Penfold (PDC) and Harry Clark - CISSP, CISM (Vanta), where we will cover supply chain risk, security awareness impact, M365 gaps and how GRC can drive real organisational change.   👥 As always, SASIG operates under the Chatham House Rule, creating the space for open, candid discussion and with a full room, the conversations are flowing.   🌐 If you are interested in coming to our upcoming events, make sure to register here: www.thesasig.com/events/   #CyberSecurity #GRC #Resilience #RiskManagement #Compliance #SASIGEvents #CyberResilience

    • No alternative text description for this image
    • No alternative text description for this image
    • No alternative text description for this image
    • No alternative text description for this image
  • View organization page for Redflags.

    3,111 followers

    In our latest Behavioural Impact Report, we explored which AI websites rank highest for workplace usage and how those patterns are shifting inside organisations. Despite the eye rolls and growing criticism, OpenAI’s ChatGPT still sits comfortably at the top as the most visited AI website. Meanwhile, platforms like Google Gemini, Anthropic Claude and DeepSeek are still playing catch-up. Our experts looked at the AI usage metrics tracked by Redflags. customers to see where governance was having an impact on digital behaviours. In some organisations, usage patterns fell in line with clear rules around which AI tools employees are permitted to access. In others, employees were actively searching for workarounds as a result of mounting pressures (e.g., increased workload, fear of being replaced, etc). If you’re a cyber security professional who feels like you're playing a game of whack-a-mole - every time one AI site is blocked, another immediately appears in its place - and want to shape safer behaviours and not just secret ones, this report is for you. 📚 FULL REPORT: https://hubs.la/Q04gW4st0 🗣️ Contributors: Tim Ward, 🐡 Lucy Finlay CISM, George Ponder, Melanie Knight, Phoebe P. and Noah Browne. 🎨 Design Credits: Lisa Raynaud

    • No alternative text description for this image

Similar pages

Browse jobs