Understanding Human Risk Management in Cybersecurity
Ashley Rose, the founder and CEO of Living Security, is reshaping the approach to cybersecurity by focusing on Human Risk Management. Since establishing Living Security in 2017, she and her co-founder Drew Rose have recognized how traditional security awareness training tends to be ineffective. Instead of a mere checklist of completed tasks, they advocate for immersive experiences that genuinely engage employees while monitoring behaviors to better manage risks.
Why Traditional Training Falls Short
Security awareness training often falls into a routine of being forgotten after completion. Ashley points out that when security training is transformed into engaging formats—such as gamified simulations—the retention and application of knowledge improve significantly. This experiential learning, as they found with their prototypes like cybersecurity escape rooms, leads to a behavioral change in employees, promoting a security-aware culture rather than just compliance.
A Shift Towards Workforce Security
Human risks today are not only influenced by individual actions but also how humans interact with Artificial Intelligence (AI). As organizations start to integrate AI within their processes, the risks now intertwine with automated systems. Ashley emphasizes the need for an evolved strategy that merges human behavior understanding with AI governance—creating a secure workspace where both components are monitored effectively in the context of potential threats.
The Case for Proactive Engagement
The challenge now is to address risk collectively—taking into account the diverse behaviors and access levels of employees. Not every employee is equally risky, and Ashley and the Living Security team employ data analytics to pinpoint where vulnerabilities lie. Organizations can significantly reduce risks by focusing on individuals most likely to expose the organization to threats, employing advanced Human Risk Management systems.
Key Elements of Effective HRM
The focus on Human Risk Management includes various strategies, such as continuous training and assessment of user behavior, establishing policies that dictate acceptable conduct, and leveraging technology to track and manage risks effectively. It’s about creating a culture of security that permeates through an organization.
Embracing Continuous Improvement
As cyber threats evolve, enterprises must adopt a trajectory of continuous improvement in their security practices. The incorporation of AI and big data analytics into Human Risk Management will likely pave the way for future strategies aimed at understanding human behaviors in cybersecurity and refining responses to emerging threats—and this evolution is only just beginning.
Write A Comment