Riskill blog: security and human risk for SMBs

• Why training does not reduce the risk (and what actually does)

  Completing a course does not change behaviour. The real gap lies between knowing and acting when the time comes to make a choice. That is what really reduces human risk.

• The human factor in safety: the figures that matter

  68% of breaches involve a human element. Data from the Verizon DBIR and Mimecast on human risk, and what this means for organisations.

• 8% of people, 80% of accidents: rethinking our approach to risk

  Human risk is concentrated: 8% of people account for 80% of accidents. Why training everyone in the same way doesn’t work, and what to do instead.

• What is Human Risk Management?

  Human Risk Management identifies, measures and reduces the risks associated with people’s behaviour. What it is, how it works and why it goes beyond traditional training.

• How to build a culture of safe behaviour

  A culture of safety makes the right behaviour the natural choice. How to build it: leadership, psychological safety, setting an example and shared responsibility.

• AI and human risk: the threats arising from behaviour

  AI creates new behavioural risks: sensitive data in chatbots, more convincing phishing, and decisions delegated to algorithms. How to manage human risk in the age of AI.

• Measuring human risk: why completion rates are not enough

  The completion rate measures participation, not behaviour or risk. What should you actually measure to find out whether your organisation’s exposure is falling?

• The risk does not lie in the systems. It lies in our habits.

  Organisations invest in tools but remain vulnerable. The greatest risk lies in people’s day-to-day behaviour. Because habits trump systems.