Considering the potential to use 'active' awareness raising techniques to promote security messages to users in ways that give them a direct demonstration of the need to improve behaviour. [Released under Creative Commons Attribution-NonCommercial-ShareAlike 2.0 UK: England & Wales licence.]