What Gymnastics Taught Me About Cyber

This article argues that cybersecurity training fails because it punishes mistakes rather than rewarding improvement, contrasting this with how gymnastics coaches break complex skills into manageable, progressively reinforced steps. By applying this behavioral approach to vendor management—a critical control area where 60% of breaches originate—organizations can shift from compliance-focused training to habit-based learning that drives measurable security improvements. IT leaders must reimagine their security culture to celebrate incremental progress and personalize learning paths, rather than expecting employees to perform perfectly on complex security tasks without guidance.