Andy Wood

My journey into writing began in early 2024 when I started working on The Rise of the Security Champion, a book about empowering individuals to take ownership of security within organisations. However, midway through, I realised that the cybersecurity culture space needed a broader foundation first. That’s when I pivoted and wrote Building a Cyber Security Culture, a book that lays the groundwork for creating security-conscious workplaces. Since then, I’ve written a few books, each tackling different aspects of security behaviour and culture change: - Building a Cyber Security Culture – A strategic guide to embedding security awareness and behaviour into organisations. - The Behaviour Change Playbook for Cybersecurity – A step-by-step guide to designing and implementing behaviour change interventions for security. - #BeCyberWise – A practical book for families, schools, and communities, helping people of all ages develop cyber-safe habits. - The Rise of the Security Champion – My original book, now set for Summer 2025, which explores how organisations can develop peer-driven security cultures. Why I Do This ------------------ Cybersecurity isn’t just an IT problem – it’s a people challenge. My mission is to make security accessible, actionable, and embedded in everyday life. Whether it’s through my books, research, or my work, my goal is to help people build lifelong cyber habits that protect them both professionally and personally. What’s Next? I’ve definitely caught the authoring bug, and there’s more to come! #BeCyberWise launches on 1st March 2025, followed by The Behaviour Change Playbook for Cybersecurity on 14th April 2025. I’m also back working on The Rise of the Security Champion, completing the book that started it all. One thing is for sure, it will not end there! In parallel I am also undertaking a professional doctorate in cybersecurity which will help identify and inform my future works in this field. Through my writing, research, and work at CyBehave, I’m committed to driving real change in cybersecurity culture—one book, one strategy, and one behaviour at a time.