It does not collect typical behavioral data (i.e., data that reflects what an individual actually does, such as clicking on a phishing link or plugging a personal USB into their work machine). Instead, it focuses on assessing an individual’s behavior in any given context based on the available information.