A company's cyber defenses are based on a secure infrastructure and risk-aware behavior by employees. With rising cyber … threats and normative training efforts showing limited impact, raising cyber risk awareness is emerging as a challenging … to understanding attitudes and influencing risk behavior. We propose and test a novel methodology to combine and …