For two decades, the security industry has operated on a single premise: that human risk is a knowledge problem. Train people on the threats. Test their awareness. Repeat annually.
The premise is not wrong. It is incomplete.
The most costly insider incidents on record were not failures of awareness. The people involved understood the rules. What eroded wasn't their knowledge. It was their resistance — to pressure, to authority, to the slow accumulation of conditions that made deviation feel reasonable, necessary, or inevitable.
Awareness training has no instrument for that.
Awareness training has a ceiling. The industry has not named it.
Enron's employees knew fraud was wrong. Wells Fargo's staff knew the accounts were fabricated. The people at the center of the most documented behavioral failures in corporate history were not ignorant of the rules. They were subject to something a knowledge model has no instrument for.
The traits that produce catastrophic insider behavior are stable. Fatigue that erodes judgment incrementally, without announcement. Compliance architecture that makes authority difficult to resist under the right structural conditions. Rationalization capacity that constructs justification in real time — making deviation feel not just acceptable, but necessary. These are not knowledge gaps. They are structural features of human behavior, present in every organization, and unchanged by anything that happens in a training cycle.
The behavioral science behind this has been established for thirty years — across personality psychology, cognitive research, and compliance studies. The security industry has never operationalized it.
Veros was built on that gap.
Veros is built on the Intangybl Behavioral Risk Index (IBRI) — a proprietary four-dimension scoring model, developed by Intangybl, grounded in validated behavioral and personality science. It separates what is trainable from what is not. One dimension responds to intervention. Three map to stable trait architectures that shift with conditions, not with training cycles.
The IBRI is a proprietary scoring methodology — developed and owned by Intangybl. Its architecture separates what is measurable from what is stable, and what is stable from what is trainable.
The scoring formula, dimensional weighting, and application framework are not published. What is available is the methodology brief — which outlines how Veros applies the IBRI to produce a continuous behavioral risk reading at both the individual and organizational level.
Each IBRI dimension maps directly to peer-reviewed behavioral and personality science — research that has been validated for decades and never operationalized by the security industry. The dimensional architecture, scoring methodology, and application framework are proprietary to Intangybl. What the academic lineage provides is validation. What Intangybl provides is the instrument.
The distance between where organizations think their behavioral risk lives — and where it actually does — is not a mystery. It has a structure, a score, and a methodology. If you are thinking about what comes after awareness training, this is where that conversation starts.