This talk aims to discuss the relationship between human behavior and security measures. When developing a security-training tool, it is important to understand the users’ needs and experience in order to fulfill the security policy. This talk is taking its point of departure in learnings acquired in the development project ‘Emergency cockpit-training app’, and how DBI applied ethnographic methods to understand the user and used these insights while developing the app. Researching the user’s environment is a crucial part of avoiding classical pitfalls that relates to Human Computer Interaction.