Cohort 1 · SAT-led legacy

Verified 2026-04-27 · Decays 2027-04-27

Objection · 03

Nimblr says 80% click reduction in three months.

Validate

Acknowledge the number. Click-rate reduction inside the simulation channel is a strong activity metric, and training is clearly landing.

Reframe

Activity is not posture. The separate question is what is happening to broader human-risk posture beyond the simulation channel.

Ask

What is the trajectory on role-weighted risk for your privileged-access users over those same three months?

Proof · Regulation

NIS2 needs proof that your controls are actually working, per role — not just that simulations ran. Click-rate inside the simulation channel is not that proof.