Cyber Risk
COM-B Behavioral Change Model: Why Clinical Staff Bypass Security Controls and What to Do About It
Clinical staff don't bypass security controls because they're careless — they do it because the behavioral conditions for compliance aren't in place. The COM-B model gives CISOs a structured, evidence-based framework to diagnose and fix the root causes of insecure clinical workflows.