Step 01
Awareness introduces the risk.
Practical, relatable education that gives people the language and baseline understanding needed to notice risk at all.
About
A cybersecurity practice
built for humans.
Who we are
Our story and strategic evolution.
TheCyberMamushka began by taking cybersecurity awareness beyond the corporate environment — relatable stories, humour and practical examples that made cyber safety accessible to ordinary families and communities.
As the platform grew from weekly articles into a card game, challenges, puzzles, scam-checking tools and assessments, the problem became clearer. Information mattered, but information alone could not explain why knowledgeable people still made poor cybersecurity decisions.
That insight moved the work toward human-centered cybersecurity: examining the relationship between what people know, what they perceive, the pressures surrounding a decision, and whether the environment makes safer behaviour easier or harder.
The environments change. The human being does not.
Our mission
To strengthen the behaviour, judgment and decision-making people need to make safer cybersecurity choices in everyday life.
Our vision
A world where people do not simply know about cyber risk — they know how to respond when it matters.
Our foundational belief
Cyber safety begins at home — because the habits, pressures and decisions people carry into workplaces are often formed long before they arrive there.
The core problem
Knowing what to do is not the same as doing it.
People understand the guidance — and still decide badly when the moment is loud, fast, or unfamiliar.
This is where judgment lives.
- urgency
- authority
- trust
- fear
- fatigue
- convenience
- uncertainty
- distraction
Our human-centered approach
Five stages that are not interchangeable.
Step 02
Understanding makes it matter.
Guidance connected to consequences people recognise in their own families, communities and workplaces.
Step 03
Practice rehearses the decision.
Scenarios, challenges, games and puzzles that let people meet ambiguity before the consequences are real.
Step 04
Digital judgment applies it under pressure.
Interpreting a situation, weighing risk, questioning assumptions, resisting harmful pressure and choosing a response.
Step 05
Human-centered cybersecurity asks what shapes the decision.
It looks past training and asks whether our systems, culture, processes and technology actually help people use what they know.
Human-centered cybersecurity
What actually shapes behaviour, judgment and decision-making?
And do our systems, culture and processes help people use what they already know — when it matters?
Systems
Do the tools people use make the safe choice the easy one — or does security ask them to fight the interface every day?
Culture
Can someone say “I clicked it” out loud without fear? Shame is the most expensive control an organisation can install.
Processes
When urgency and authority collide, does the process give people a place to pause — or does it reward speed?
The foundation
Cyber safety begins at home — and travels with us everywhere.
The same human making digital decisions at the kitchen table is making security decisions in community and at work.
At home
Where the habits are formed.
Screen-time conversations, shared passwords, the message a child almost replied to. The first place judgment is practised.
In community & school
Where the habits are tested.
Schools, churches, savings groups, WhatsApp circles. Trust travels fast here — and so does the scam that borrows it.
At work
Where the habits are inherited.
The same human, now inside your systems, culture and processes. Nothing about them resets at the office door.
Theory of change
From awareness to safer digital decisions.
The upper pathway is the learner journey. The layer beneath it is what decides whether knowledge can actually be used when it matters.
01
Awareness
Encounter risk information
02
Knowledge
Understand what matters
03
Recognition
Spot risk in context
04
Practice
Rehearse choices
05
Judgment
Reason under pressure
06
Safer decisions
Choose safer responses
07
Safer behaviour
Repeat safer habits
08
Resilience
Families, communities & organisations
The human-centered layer — what shapes the decision?
- Systems
- Culture
- Processes
- Technology
- Trust
- Authority
- Urgency
- Fatigue
- Convenience
- Uncertainty
Awareness tells people what to do. Human-centered cybersecurity asks what helps them do it when the decision becomes difficult.
Evidence over activity
How we think about impact.
Reach matters, but reach alone is not enough. Attendance and quiz scores do not tell us whether someone will make a safer decision months later, under a believable request and real pressure.
We intend to measure reach, learning, recognition, judgment, behaviour, confidence, recovery — and whether the environment itself becomes more supportive of safer action.
Immediate outputs
People reached; sessions delivered; scenarios completed; tools used; assessments completed; partnerships established.
Short-term outcomes
Improved knowledge, understanding, risk recognition and confidence to question or verify.
Intermediate outcomes
Improved digital judgment, safer decisions under pressure, more consistent verification, earlier reporting and stronger recovery confidence.
Environmental outcomes
More supportive reporting cultures, reduced friction in secure processes, better alignment between awareness and organisational reality.
Long-term impact
Safer digital behaviour and more resilient families, communities, schools and organisations.
I'm Pauline — a cybersecurity awareness professional, human-centered security advocate, and the voice behind TheCyberMamushka.
My work sits at the intersection of two worlds. By day I partner with organisations — banks, schools, NGOs, fast-growing startups — to design awareness programmes that actually change behaviour, not just complete a compliance checklist.
By evening I'm a mother and an aunt and a friend, fielding the questions that keep families up at night: is this link safe? what do I do if my child sees that? how do I lock down our home Wi-Fi?
I believe security is, fundamentally, a human problem. The strongest technical controls in the world fall apart when people feel confused, ashamed, or scared. So I teach the way I'd want to be taught — with care, context, and respect for what you already know.
Speaking
Keynotes & panels
Conferences, leadership offsites, school assemblies, and parent evenings.
Advisory
Human-risk programmes
Awareness strategy, phishing simulation review, and cultural assessments.
Workshops
For teams & families
Hands-on sessions designed around your real risks, not generic slideware.
Writing
The monthly journal
A short letter on what's actually happening — and what to do about it.
Partnership models
How we can work together.
Engagements range from a single workshop to longer-term programmes, research collaborations or tailored learning experiences. The intervention should respond to the problem — not force every audience into the same format.
Human-centered workshops
Explore behaviour, judgment, culture and the decision environments people actually work in.
Awareness programmes
Design practical, culturally relevant campaigns and learning journeys.
Scenario-based learning
Custom challenges built around the risks a specific audience really faces.
Research partnerships
Develop evidence around digital judgment and human-centered cybersecurity.
Speaking & facilitation
Keynotes, panels, moderated conversations and specialist sessions.
Product & programme partnerships
Support, sponsor, co-develop or scale practical learning tools.