Why Every UK SME Needs a Cyber Incident Response Plan
A supplier calls to question a change to your bank details. At almost the same time, someone in the office says they cannot access a shared folder, and another team […]
Director of Training and Development, Cyber Rebels.
Andy Longhurst is the founder of Cyber Rebels and a cybersecurity practitioner and educator focused on how risk actually shows up in real organisations. His work sits at the intersection of digital safety, education, and practical risk management — helping teams understand not just what policies say, but what happens in the moments where decisions are made under pressure.
With a background spanning adult education, web development, and technical consultancy, Andy specialises in translating complex security concepts into clear, usable understanding. Rather than focusing solely on tools or compliance frameworks, his approach centres on human behaviour, judgement, and the systems that shape everyday choices.
He delivers live, interactive cyber awareness training for organisations of all sizes, from small businesses and education providers to public-sector teams and larger organisations operating in complex risk environments.
Outside of delivery, Andy spends his time analysing emerging attack patterns, refining training design, and exploring how organisations can build resilience that holds up in the real world — usually with a strategically sized cup of tea close to hand.
Why Cybersecurity in FE Is Part of Supporting Learners, Not Separate From It
A support decision that does not feel like a cyber decision A learner cannot access their account just before a session starts. The tutor is already trying to settle the […]
The Art of Human Hacking: Understanding Social Engineering Threats
An employee is working through a task that needs to be completed before the end of the day. It’s routine work, the kind that involves moving between emails, systems, and […]
The Psychology of Passwords: A Deep Dive into the NCSC’s Three Random Words Strategy
A password is rarely created in a calm, deliberate moment where someone sits down and thinks carefully about security. More often, it is created in the middle of something else. […]
The Dark Web Decoded: Unveiling the Underbelly of the Internet.
Why the Dark Web Still Gets Misunderstood The dark web is often discussed in extremes. It is either framed as a hidden world of criminal activity or dismissed as something […]
AI Can Detect Threats — But It Can’t Fix Human Decisions
The Moment That Doesn’t Look Like Risk A message comes through on Teams. It appears to be from someone senior: short, direct, and straightforward. They need something sorted quickly. There […]
How Employees Actually Make Security Decisions at Work
The Reality of Workplace Decisions There’s an assumption built into most cybersecurity training. That when an employee is faced with something suspicious, they will recognise the moment, pause what they […]
What Is Behaviour-Led Cybersecurity Training?
In our previous article, Why Knowledge Alone Isn’t Enough, we explored why traditional cybersecurity awareness training often fails to prevent real-world cyber incidents. Cybersecurity incidents are frequently attributed to human […]
Behaviour-Led Cybersecurity Training: Why Knowledge Alone Isn’t Enough
Cybersecurity has become part of everyday conversation in modern organisations. Major ransomware attacks, data breaches, and online fraud incidents are now widely reported in the news, and most employees are […]
Why Charities Are Becoming a Prime Target for Cybercriminals
Charities occupy a unique position within society. They exist to support communities, protect vulnerable individuals, and address challenges that many other organisations are not equipped to handle. From local community […]
