Bundle

Human Risk Management

Help staff recognise current threats, practise safer behaviour and reduce people-related security risk.

The outcome

Bring awareness, realistic practice and breach signals into a measurable program for reducing human risk.

3 products included

Questions and answers

Questions about Human Risk Management

Practical answers to common questions about managing this responsibility well.

What makes security awareness training effective?

Effective training is relevant to the person's role, concise enough to complete, reinforced throughout the year and connected to current threats and organisational procedures. Completion alone should not be the only measure.

How often should staff receive cyber security training?

Provide training during onboarding and at regular intervals, with additional learning after incidents, policy changes, emerging threats or simulation results. Short, timely reinforcement is usually more useful than one annual session alone.

How should an organisation measure security awareness?

Combine completion data with simulation outcomes, reporting behaviour, repeated-risk patterns and incident trends. The aim is to identify where support is needed and whether behaviour is improving.

How should human cyber risk be managed without blaming staff?

Treat behaviour as part of a wider system. Combine usable processes, timely learning, safe simulations, reporting culture and technical safeguards, then improve the conditions that make mistakes more likely.

See Human Risk Management in action

Talk to us about the products your organisation needs and how this bundle fits your priorities.