Develop Your Habits: Level 2 – Developing Behavior
If you have already started to ask yourself questions about your online security and have installed the first defense tools, congratulations: you have exited the danger zone of Level 1. The Developing Behavior level is a crucial transition phase. It is the moment when theory begins to become practice, even if uncertainty can still make you hesitate in the face of more subtle threats.
At this stage, you are no longer an easy target, but you are not yet completely autonomous. This page will help you recognize your progress and identify the gaps that separate you from real and constant security.
What is “Developing Behavior”?
It indicates an initial level of adoption of secure behaviors. A person at this level:
- Is actively acquiring knowledge and technical skills.
- Adopts some precautions, but intermittently or incompletely.
- May feel uncertain about how to correctly apply defenses in new situations.
What it is NOT: It is not yet “compliant” behavior (Level 3). The difference lies in consistency: at Level 2, security is an intention, not yet a consolidated habit.
The “Digital Path”: Starting to Chart the Course
In the digital domain, this level represents the moment you stop running blindly through the minefield and start charting a path.
Here, the traveler is beginning to delineate a safer path in the digital territory. They learn to recognize dangers, adopting precautions such as installing antivirus software and firewalls.
Your Strengths and Weaknesses
At this stage of the journey, your profile is characterized by light and shadow:
✅ What you are doing well:
- First Tools: You have understood that the device must be protected and, probably, you have installed an antivirus or activated the system firewall.
- Active Interest: You seek information and try to follow the advice of experts.
⚠️ Where you are still vulnerable:
- Phishing Scams: You might still have difficulty distinguishing an authentic email from a counterfeit one (R17).
- Update Management: You tend to postpone software updates, ignoring that they are your first defense against bugs (R6).
- Inconsistency: You apply security rules “a bit yes and a bit no,” depending on haste or laziness.
How to move to the next level
To evolve to Level 3 (Compliant), you must transform your isolated efforts into a routine.
- Automate: Don’t wait until you feel like updating; set up automatic updates on all devices.
- Practice Suspicion: Before clicking a link, stop for 5 seconds. Analyze the sender’s email address.
- Use the Framework: Don’t limit yourself to antivirus. Start exploring password management recommendations (R1).
Connection to the Cyber Welfare Framework
Level 2 primarily acts on Initial Awareness:
- Competencies: Acquisition of the first technical tools.
- Awareness: Perception that risk exists and must be managed.
- Behavior: First defense actions, albeit discontinuous.
How to check if you are at this level
Reflect on your latest online actions:
- Do I have an active antivirus, but don’t know how to interpret its warnings?
- Do I only update the software when the computer forces me to?
- Do I happen to have doubts about whether a link is safe, but click it anyway “out of curiosity”?
- Have I changed some passwords, but still use similar ones between them?


