Behaviour surveys help you understand why a security behaviour happens. When someone triggers a behaviour event, such as clicking a simulated phishing link without reporting it, CybSafe asks them a short question about what got in the way. Their answers are mapped to COM-B (capability, opportunity and motivation) and turned into an insight with suggested next steps.

Before you start

Behaviour surveys are part of RESPOND and use workflows.
To send surveys in Microsoft Teams or Slack, set up the integration first. The Web channel sends an email with a link to the survey.
Answers are classified with AI. Your account needs AI features turned on. If they're off, answers are saved but no insight is produced. Contact your customer success manager to check.

Create a behaviour survey

Go to RESPOND > Behaviour surveys and click Create.
On Configuration, choose the Security behaviour and the Trigger event that should send the survey.
Choose a Survey type: Single Select, Multi Select or Text. The questions are written by CybSafe's behavioural scientists for that behaviour and trigger.
Set a Send delay if you want to wait before the survey goes out. Leave it empty to send straight after the event.
Set a Re-entry delay. This is the minimum time before the same person can get this survey again. The minimum is 7 days.
Choose your Delivery channels: Web, Microsoft Teams or Slack.
Check the Name. It's filled in for you from the behaviour, and you can change it.
Click Next. On Audience, add filters if you only want to survey some people. Leave it empty to survey everyone who triggers the event.
Click Next. On Review, click Preview to see the survey as your people will.
Click Activate to start the survey, or Save draft to activate it later.

Which behaviours can I survey?

You can currently survey these security behaviours:

Clicks only a legitimate link
Reports a suspicious message
Shares sensitive information only with an approved recipient

What your people see

Your people get a short message explaining what happened and asking for their view. They click Start, answer up to two questions and click Submit.

See the results

Click a survey's name on the Behaviour surveys page to open its report.

Insight shows a short summary of what the answers mean, up to three suggested next steps, a COM-B breakdown, responses over time and a breakdown by group. Click any percentage in the summary to see the responses behind it.
Responses shows how many surveys were sent, how many people responded, the leading COM-B driver and every answer with its COM-B classification. Use the filters to narrow by date, group, question type or COM-B category.

The insight appears once at least 10 responses have been classified. Until then, the Insight page says Collecting data. Analysis runs once a day. To run it sooner, click the three dots next to the survey and choose Analyse.

Suggested next steps

Each suggestion targets the COM-B driver behind a finding and names who it's for. A suggestion might be a nudge from the library, a training module or an action outside CybSafe, such as changing a default setting. If CybSafe Signal is enabled, you may also see suggestions to generate a new nudge or module. Suggestions don't change anything on their own: set up the ones you want in the usual way.

Manage your surveys

Click the three dots next to a survey to:

Pause or Activate it
Edit its name, send delay, re-entry delay or audience
Analyse its responses now
Archive it, or Unarchive it from the Archived view

You can't change the behaviour, trigger, survey type or channels after you create a survey. Create a new survey instead.

FAQs

Why is my Insight page empty? The survey needs at least 10 classified responses before an insight appears, and the analysis runs once a day. Check the survey is active and that AI features are turned on for your account.

Is the summary written by AI? CybSafe calculates every statistic first. AI then writes the summary from those statistics, and every number in it links to the responses behind it. Your people's answers are classified by AI; the summary itself is written only from aggregate figures.

Can someone get the same survey twice? Only after the re-entry delay has passed and they trigger the event again.