Security Norm Contagion: Threshold Adoption Model

A security practice rarely spreads through an organization because a rule was written — it spreads (or doesn't) the way any social norm does, member by member, each one watching how many peers around them have already switched. This simulator renders an organization as a 3D network of members and runs the Granovetter–Watts threshold-contagion model: every member carries a personal risk-appetite threshold drawn from a configurable distribution, and adopts the practice once the fraction of their already-adopting neighbours clears that threshold. Seed a small set of early adopters, tune the population's average risk appetite and how diverse it is, and watch whether the practice tips into a full cascade, stalls in an isolated pocket, or never leaves the seed group — the same dynamic that determines whether an MFA rollout or a patch mandate actually reaches everyone.