Andy Longhurst
- Email: [email protected]
I’m a cybersecurity educator and digital skills specialist with a people-first approach to learning. My focus has always been simple: to make cybersecurity understandable, relevant, and usable in everyday work, not just in theory.
Over the past decade, I’ve worked with SMEs, charities, corporate teams, and public sector organisations, designing and delivering training that reflects how cyber risk actually shows up in real environments. That work rarely starts with tools or policies. It starts with understanding how people make decisions when they are under pressure, working quickly, and responding to situations that appear legitimate.
That thinking is what Cyber Rebels is built around. Across organisations of different sizes and sectors, I have seen the same issue appear repeatedly: people are often aware of cyber risk, but risk still forms inside ordinary work when decisions need to be made quickly, confidently, and with incomplete information.
My work focuses on making those moments easier to recognise. I help people understand why certain actions feel right at the time, when a situation deserves a pause, and how to respond with confidence without making cybersecurity feel overwhelming or separate from the work they already do.
My background in adult education, mentoring, and consultancy shapes how I approach every session and conversation. I’ve supported organisations both proactively and following real incidents, helping teams rebuild confidence, strengthen judgement, and make safer decisions in the situations where risk actually appears.
My professional background is supported by qualifications and memberships across cybersecurity, IT, education, assessment, digital learning, and leadership. This includes the Level 3 Award in Education and Training, the Level 3 Award in Assessing Competence in the Work Environment, Cisco cybersecurity training including Cybersecurity Operations Fundamentals, Cybersecurity Leadership and Management from Infosec, and professional memberships with BCS and the Chartered Institute of Information Security.
Those foundations matter because effective cybersecurity training needs to be credible, structured, and professionally delivered. But the real value is in how that knowledge is translated for people in everyday roles. My focus is on helping individuals and teams understand cybersecurity in a way that feels practical, manageable, and relevant, so safer decisions become part of how work gets done.
My professional skills sit across cybersecurity, digital education, and behavioural risk, with a focus on how these areas come together in real working environments.
I design and deliver cybersecurity training that reflects how organisations actually operate, not just how they are expected to operate on paper. This includes building structured learning programmes, developing realistic scenarios, and facilitating sessions that help teams recognise and respond to risk in context.
A key part of my work involves translating complex technical and security concepts into clear, practical understanding. This allows individuals at all levels — regardless of technical background — to engage with cybersecurity in a way that is relevant to their role, responsibilities, and everyday decisions.
I also work directly with organisations to identify where risk is forming within day-to-day processes. This often involves reviewing how communication, access, escalation, and decision-making are handled in practice, then supporting teams to strengthen those areas without adding unnecessary complexity or blame.
My experience includes helping teams understand how common cyber risks appear inside everyday work, from suspicious requests and access decisions to reporting, escalation, verification, and secure working habits. Rather than treating these as isolated topics, I focus on how they show up in real situations and how people can respond with confidence.
My background in adult education and assessment shapes how I design learning. Sessions need to be structured enough to meet professional standards, but practical enough to make sense to the people applying the learning in real situations. That means clear outcomes, realistic scenarios, measurable progress, and training that stays connected to how work actually happens.
Across all of this work, the focus remains consistent: helping individuals and teams build the confidence and judgement needed to make better decisions in everyday situations.
