Why we need new and better human cyber risk metrics
To make a difference as a security professional today, you need board support. You need resources. You need directors to trust and back you. You need organisational leaders to promote security.
You are almost certainly miscalculating your cyber risk
Although it might not seem like it, people’s actions following 9/11 demonstrate just how likely it is you’re miscalculating your cyber risk.Following the terrorist attacks of 9/11, people began to change their travel plans.
Some simulated attacks help reduce cyber risk. Others are redundant. What’s the difference?
Here’s an interesting conundrum for cyber security professionals.Some simulated attacks reduce human cyber risk.Others, however, have no effect on risk – and may even have a negative impact.
Measuring The Effectiveness of Security Awareness Training
Online security awareness training is now the most popular form of security awareness training in the world. As we noted here, that’s good news when it comes to measuring the effectiveness of security awareness training. Offline, things aren’t so easy to track....
Calculating your true phishing vulnerability
Have you ever wondered whether your reduced phishing susceptibility rate is really telling the full story? Or wondered why it may be low one week but spike the next?