Move work passwords into a password manager.
Security habits your staff actually keep.
Short, practical tasks in the Demysti5 app instead of an annual video. Some check themselves. All of them roll up into progress by team and the People score in your portal.
People remember what they do, not what they watch. So every habit is something to do, on the device they already carry.
Each one takes a few minutes and is chosen from the risks Groundwork found, not a generic syllabus.
If the habit is "set up a second factor", we confirm it from your identity system instead of taking a tick on trust.
Managers see teams, not a league table of individuals. It feeds the People score in your portal.
Six topics, each with habits that fit a normal working week.
Move work passwords into a password manager.
Register a second factor, and know what to do if you lose your phone.
Spot a fake supplier email, and report it in one tap.
Turn on updates and screen lock, on work and personal devices.
Use your phone's hotspot, not the cafe wifi.
Know what never goes into an AI tool, and which tools are approved.
The next habit for each team is picked from its weakest topic, automatically.
| Team · Example | Passwords | Second factors | Phishing | Devices | Away | AI at work | Overall |
|---|---|---|---|---|---|---|---|
| Finance | 96% | 100% | 95% | 90% | 85% | 86% | 92% |
| Admin | 92% | 96% | 90% | 85% | 80% | 85% | 88% |
| Advisory | 88% | 92% | 80% | 76% | 70% | 80% | 81% |
| Partners | 70% | 75% | 45% | 55% | 50% | 53% | 58% |
When something looks new but might be fine, like a sign-in from a new laptop, we ask the person directly. One tap answers it, and the answer goes straight into your Known Normal.
Needs Always On or Device Shield, which raise the questions.
How Known Normal worksJoiners get their first habit in week one. Leavers drop off automatically, so you never pay for people who have gone.
So your staff start with the risks your business actually has.