Connect with us

Tech

Inserting AI into cyber awareness | Computer Weekly

Published

on

Inserting AI into cyber awareness | Computer Weekly


The concept of security awareness training is traditionally one of static procedures, including online training and tests, phishing simulations, and physical elements such as posters and displays.

This is all practical for compliance, but does this concept move with the times? In a world where AI is king, how does awareness training fit with this technology trend? As an example, delegates at KnowBe4’s recent user conference in London heard how the company’s more AI-driven direction is taking shape.

Increase in agents

CEO Bryan Palma predicts that AI would lead to an increase in the number of people and agents saying that “AI makes us more productive”, and with the number of agents being deployed in cyber security increasing. This could result in fewer people being employed; however, the attitude at KnowBe4 is to train the workforce regardless of whether they are man or machine.

“We don’t care as, ultimately, we’re going to prepare your organisation and your workforce to be trained correctly and be an advantage for you in the market,” he says. “Now it is probably 100% humans we train and zero agents, tomorrow it may be 60 humans and 65 agents – we’re not going to care.”

That movement towards agents, and supporting them as much as employees, is particularly forward-looking as the adoption of AI-based options increases. Palma claims that this adoption of support for agents is “about security culture, and that is really the outcome that we’re trying to build”.

He says: “The reality is that agents will be part of your security culture, and bots will be part of your world. If we turn the clock forward a few years, you will have multiple bots that work for you, and you’re going to tell them to do things, and they will work independently, and instead of managing only people, you’re going to need to manage bots as well.”

This move is all about culture, and agents have to be part of that culture “just as humans would be”, he explains.

Workforce trust management

Palma states that the company’s direction is towards the concept of “workforce trust management”, an extension of the original security awareness training and the more commonly used term “human risk management”.

He explains that workforce trust management considers autonomous security, which governs and trains both humans and AI agents, as the workforce will be diverse: “You need to protect them all, as each can be a vulnerability.”

The obvious question is how AI and automated functions are changing both workforce trust management and KnowBe4’s core awareness and training mission? Sitting with Palma, Computer Weekly had the opportunity to ask him about this move towards automation and if there was enough of a grasp of the roll-out of automated tasks in the way that KnowBe4’s technology works.

Palma says the company was thinking about it and developing around it, and then when he joined the firm, he realised both the impact of this from other things that he has done and the need to accelerate development.

“I’ve put more focus on it; I’m putting more investment behind it. I want to accelerate what we’re doing, but we have six agents in the market – we were already doing this, and it becomes critical because it just allows our system to run better,” he says.

Is there more demand from customers for that kind of automation in a workforce trust management offering? He explains that one of its agents creates a phishing landing page to save time for the IT and cyber security teams to build new versions of the phishing tests continually.

Donna Huggett, information security education and awareness manager at Belron – the parent organisation of Autoglass and Safelite – tells Computer Weekly that she uses KnowBe4 for phishing simulations. The AI-enabled technology “actually helps us massively cut down quite a huge chunk of work”, as time was previously spent on developing templates and choosing the right one to use, the options in the AIDA technology do the work for you.

She also said this determines the level of phishing message to be sent to an employee, for those who need to be challenged more and who will receive slightly harder emails. “And that’s all automated now, so that’s a massive help,” she says.

Paul Maxwell, cyber security engineer at retailer Poundland, says he primarily uses KnowBe4 for phishing simulation, and used 115 templates, but found that some were no longer working. This required new templates to be built, and it “was adding 35 hours a month” to his workload as users became savvier, and he needed to create new emails.

“I spent a good couple of hours at night, just thinking ‘That’s a good one, that’s going to catch people out’. With that kind of stuff, you can’t just go half measure, you’ve really got to try and catch them out,” he says. “Because if you don’t catch them out, you don’t help them learn.”

He explains that the most effective options were those that appeared to come from HR, such as clicking to claim annual leave, and finance and IT issues, including updating to Windows 11. However, the staff engagement has seen an increase in reported phishing attacks. While Maxwell admits that each alert takes time to investigate, he acknowledges that the platform has been really helpful.

“This is exactly what I need: firstly to help me move security forward in the business, but also to be able to take a step back and look at other areas I need to focus on,” he adds.

Automated agents

In terms of automated agents, Computer Weekly asked Palma if the intention was to add machine learning to enable the examples above, and if it could get to the level where it could replace the practitioner’s need to do awareness training by determining the right campaign for employees?

Palma explains that people are overlooking this link and are moving directly to AI, while the human link is vital; there is machine learning involved. “Everybody wants to think GenAI, everybody wants to think next generation: we’ve had lots of machine learning and regular vanilla AI for a long time, and that’s still very meaningful and that still does a lot of the work, but conceptually it will absolutely look and say, ‘Hey, these are the mistakes you’re making’, or ‘These are the mistakes the system is making’ and how you solve that.”

Palma says that the development of agents has increased over the past year, and he sees a future where “our email, our training, our compliance is all going to be in one single platform”, which will allow KnowBe4 to add in components and capabilities as it moves forward.

Different-sized businesses

Palma also discussed whether small- and medium-sized enterprises (SMEs) are more adaptable to a changing technology concept, compared to a large organisation that has been retrospectively building in security since the 1990s.

“I think the bigger organisations have more people, they have more process, they tend to move slower,” he says. “The smaller organisations are going to be very efficient – among many of our SMEs, they don’t have a CISO, and they don’t have an information security department.

“Now, if they have three or four agents that can help them around workforce trust, they’re going to be really happy about that. So, I think adoption at that part of the market is going to be faster and quicker.”

This move to offer automated technologies is one where the company can move with the times, but the question is how adaptive are the practitioners to this new form of technology to do this straightforward task? Creating phishing templates is time-consuming, and creating new emails takes time and effort, and we have not really begun considering the energy required to filter through the phishing simulation results.

It is interesting to see this adoption of the newer ways of working, and perhaps the next step will be for practitioners to go all in on an agentic approach. Being able to offload a cumbersome task and see the results without hours of extra work would surely be worth the effort.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

DSIT gets sums badly wrong on AI datacentre carbon footprint | Computer Weekly

Published

on

DSIT gets sums badly wrong on AI datacentre carbon footprint | Computer Weekly


Government figures for projected carbon footprint for datacentres have been miscalculated. New figures for the likely carbon output resulting from electricity use by datacentres published last week have been revised upwards by around 100x for the minimum and maximum projected. 

Last July, the Department for Science, Innovation & Technology (DSIT) published its Compute evidence annex, which set out the future for AI, compute demand and implications for carbon footprint. The DSIT has since unpublished the original report, but it can still be found here

The document said: “We estimate that by 2035, the UK’s greenhouse gas emissions from AI compute could range from 0.025 to 0.142 MtCO₂ [millions of tonnes of CO₂] – this is below 0.05% of the UK’s projected total emissions.”

But in a correction to that document, the DSIT said last week: “The UK’s cumulative 10-year greenhouse gas emissions from AI compute could range from 34 to 123 MtCO₂ – this is around 0.9-3.4% of the UK’s projected total emissions over the 10-year period.”

The figures were miscalculated to a staggering degree. The earlier numbers appear to have been annual and the recent revision a 10-year figure, which makes an increase in the estimate of around 100x.

Meanwhile, analysis by climate change science and policy research group Carbon Brief suggests even those figures might be optimistic. Core to that belief is that the government aim is for 50gCO2/kWh by 2030. That figure is what can be achieved by “clean” sources of energy, such as wind, nuclear, hydro and solar. 

But figures from last month – researched by Carbon Brief and published with environmental campaigners Foxglove – suggest that is a wildly optimistic estimate if any of that power generation needs to be powered by gas, as gas-powered electricity generation comes with a carbon intensity of around 10x that of clean sources. 

Carbon Brief has calculated that emissions could in fact be somewhere between 3.4 MtCO₂ using 5% gas, and 68.1 MtCO₂ if electricity was 95% gas-generated. The higher figure – not far off the annual carbon emissions of Sweden – comes from an estimate based on a recent Ofgem projection of 20GW of future datacentre electricity demand. The same document illustrated the scale of demand by reference to actual peak demand in February 2026 of 45GW.

Ofgem’s 20GW is a projection based on National Energy System Operator research that asked customers about future grid connection requirements. 

Foxglove head of strategy Tim Squirrell said: “The government has a legally binding commitment to reach net zero by 2050. This already sat awkwardly alongside its hell-for-leather embrace of a hyperscale AI datacentre buildout, which unchecked could double the electricity consumption of the entire country.

“The situation has now been revealed to be much, much worse, given the fact the government doesn’t seem to have done even the most basic arithmetic needed to measure the potential new carbon emissions of these datacentres. The government urgently needs to confront the reality that it can’t rubber stamp hundreds of new datacentres, whilst keeping its manifesto promise to the country – and legal obligation – to combat the climate crisis.”

Computer Weekly has calculated that there is currently around 1.6GW of datacentre capacity in the UK, with just over 8GW currently in planning or under construction. 



Source link

Continue Reading

Tech

Almost 90% of women leave tech industry within 10 years | Computer Weekly

Published

on

Almost 90% of women leave tech industry within 10 years | Computer Weekly


Almost 90% of women choose to leave their tech career within 10 years of starting it, according to research from Akamai.

The tech services provider found that more than half of women leave their tech roles within the first five years of their career, and almost 90% within 10, making the average career length for a woman in tech in the UK six years. But the research also found that women would be willing to return to their tech career under the right circumstances.

Natalie Billingham, EMEA managing director at Akamai, said: “These insights illustrate that the UK tech industry has a window of opportunity to impact the choices of women in tech – from the past and present, and in the future.

“By providing opportunities for progression, flexible work and appropriate remuneration, tech leaders on the precipice of technological innovation have the chance to create impactful change on the tech workforce, fostering longer-lasting tenures, diverse leadership and an environment where women can thrive.”

The stagnant number of women in the UK’s technology sector is nothing new, with previous research finding multiple reasons why the tech industry cannot retain women workers even when it has succeeded in the equally difficult task of attracting them.

As well as a lack of visible and accessible role models, poor opportunities for career progression and lack of flexibility are reasons women often cite for opting out of the tech industry.  The top reason women gave for quitting their tech roles was a lack of inclusive culture.

More than 50% said they left because they didn’t feel as though they belonged, 40% said it was because of a lack of gender diversity in leadership positions, and 10% said gender bias played a role in their exit from the technology sector.

Nearly three-quarters of women cited a lack of career progression as playing a part in their decision to leave the sector, while 19% stated it was their definitive reason for moving away from tech.

Flexible working has been an ongoing challenge for women in the technology sector, who often leave because they cannot balance working in an inflexible workplace when they often carry a disproportionate amount of the care burden at home.

More than half of women who have left the sector said they did so because of stringent working hours, with 15% outlining that there was no ability to work flexibly and more than 40% stated there was a lack of work-life balance. This could tie in with the 19% of women who said their main reason for leaving tech was due to burnout and a negative impact on their mental health.

Out of the large number of women who have left the technology sector, 15% are currently not working, while 13% moved into finance, 13% moved into teaching, and 12% chose to work in healthcare.

Just over 30% said they left the technology industry of their own volition and prefer their new employment situation, while many said they had no plans to return to tech.

But almost 40% claimed they would be willing to come back to their technology career under the right circumstances, of which pay, career progression and better flexibility were key factors. Just under 20% said better opportunities for career progression could entice them back to tech, while 48% said a higher salary would be the defining factor in their decision to return, and 38% would come back for better flexibility.

Out of those who have come back to the sector after having left, more than half did so because of an increase in pay, and 43% did so because of renewed opportunities for career progression.

Over 40% also claimed they returned to their tech career because they were given better work-life balance, and 37% of women who have left tech said they would consider returning to the industry if they were able to work flexibly, such as working part-time, job sharing or hybrid working. Those who have returned 90% said they’re likely to stay at least two more years if not more.

Hazel Little, CEO of Career Returners, said: “The findings provide a valuable picture of what mid‑career women are looking for to return to tech, and it’s encouraging to see that the majority could be persuaded to come back under the right conditions.

“Progression pathways are crucial for retaining talent, but equally important is ensuring that women who want to return have clear, supported ways to re-enter the sector in the first place. When employers build both return pathways and progression pathways, they create an environment where women can come back, grow and stay.”



Source link

Continue Reading

Tech

Port of Tyne advances connected mobility, autonomous logistics | Computer Weekly

Published

on

Port of Tyne advances connected mobility, autonomous logistics | Computer Weekly


The North East Automotive Alliance (NEAA), alongside the Port of Tyne, autonomous driving technology provider Oxa and a consortium of leading industry and academic partners, has delivered the Port‑Connected and Automated Logistics (P-CAL) project.

The Port of Tyne is one of the UK’s major deep-sea ports handling specialised bulk and containerised products, alongside delivery logistics, and assisting growing passenger numbers via its International Passenger Terminal.

Overall, the Port of Tyne adds £658m to the local economy, supporting 10,400 jobs directly and indirectly, and as one of the UK’s largest trust ports. Fully self-financing, it runs on a commercial basis, reinvesting all of its profits back into facilities along the River Tyne for the benefit of the North East and its stakeholders.

Delivered and funded through the UK government’s CAM [Connected and Automated Mobility] Pathfinder programme, NEAA – a collaborative, industry-led cluster dedicated to fostering a competitive and sustainable environment for businesses – is working with its partners to deliver P-CAL to demonstrate autonomous container transport at the Port of Tyne. The initiative will see the deployment of a fully autonomous terminal tractor and secure mesh communication network to move containers between the dockside and the container compound, creating a UK first in waterside port automation.

P-CAL was designed to push the boundaries of autonomous logistics by deploying and validating a fully autonomous terminal tractor in a live port environment. Building on the North East’s earlier 5G CAL and V‑CAL initiatives – which looked to assess the commercial viability of deploying autonomous yard tractors on the Vantec-Nissan route in Sunderland – the project worked to move autonomous technology from proof‑of‑concept trials into a complex, safety‑critical, real‑world operational setting.

Over the course of the project, the consortium is said to have successfully designed, integrated and tested an autonomous container transport service capable of operating on a busy quayside. The scope of work included the deployment of a fully autonomous terminal tractor; a resilient mesh communication network; the capability to integrate with terminal operating systems; real‑time coordination with live crane movements; and the implementation of a cyber security framework to enable safe, remote and automated operations.

The system was developed and tested in a newly defined and highly complex operational design domain. This is said to reflect the realities of a working port environment where traffic density, variable conditions and human interaction present unique challenges.

The regional and national partnership delivering the project combined expertise across autonomous systems, logistics, cyber security, academia, legal compliance and industrial operations. The consortium believes its project has generated valuable technical, operational and regulatory insight that will inform the future deployment of CAM services across ports, logistics hubs and industrial sites nationwide.

By augmenting the capability of the existing workforce, it says it has shown that autonomous systems can take on repetitive or more hazardous tasks, allowing skilled workers to focus on higher-value roles. This is seen as particularly vital for the North East, ensuring the region remains at the forefront of industrial evolution while creating a more resilient and tech-enabled labour market.

“Delivering autonomous logistics in a live port environment has been a major step forward for the sector,” said Graeme Hardie, operations director at the Port of Tyne. “P-CAL has shown what’s possible when innovation is applied to real operational challenges, improving safety, efficiency and sustainability. The Port of Tyne is proud to have played a leading role in a project that will influence how ports across the UK and beyond approach automation.”

Oxa founder and CEO Paul Newman added: “The success of P-CAL proves how autonomy will enable the future of resilient logistics operations. Through the project, we’ve demonstrated that existing work vehicles can be turned into a digital workforce – successfully completing autonomous container movements in a dynamic quayside environment, while providing worksite intelligence necessary for real-time industrial optimisation. P-CAL provides a blueprint for how ports and industrial hubs worldwide can deploy autonomous technology to drive productivity, efficiency and safety.”

CAM Pathfinder is funded by the UK government, delivered by the Department for Business and Trade in partnership with automated mobility firm Zenzic and Innovate UK, the UK’s national innovation agency.

Zenzic programme director Mark Cracknell said: “P-CAL is a strong example of how government and industry can work together to accelerate the commercial readiness of CAM technologies. Projects like this are vital in turning innovation into deployment, creating high‑value jobs and ensuring the UK remains globally competitive in connected and automated mobility. As the project closes, the outcomes and learning from P-CAL will continue to shape future CAM initiatives, investment opportunities and policy development, both regionally and nationally.”

The next phase of the project will examine how the system performs across broader port operations, including the added pressures of multiple vehicles working alongside people, equipment and live commercial activity.



Source link

Continue Reading

Trending