Episode #1

Are your security awareness metrics actually measuring risk reduction? Or just checking boxes?

Eliot is joined by Maxime Cartier (Head of Human Risk, Hoxhunt) to break down what truly works it when it comes to reducing human cyber risk. Maxime has spent close to 10 years helping organizations elevate security awareness into human-centered risk management and led security culture initiatives for a major global retailer. In this episode, he shares the metrics that actually matter when evaluating your human defense layer and practical frameworks for quantifying risk reduction across your organization.

Here's what you'll learn in this episode:

• Why traditional metrics fail to capture real risk reduction
• The measurement framework that finally proves ROI to leadership
• Behavioral science secrets that transform knowledge into habits
• How top-performing organizations quantify their human defense layer

Timestamps:

• (00:00) Introduction to the Podcast
• (01:08) Understanding Security Awareness
• (02:54)The Evolution of Security Awareness
• (04:51) Compliance and Security Awareness
• (06:49) From Awareness to Behavior Change
• (08:40) Measuring Security Behaviors
• (11:14) Real-World Examples and Anecdotes
• (21:44) The Importance of Reporting Rates
• (24:15) Positive Security Culture
• (38:30) Adapting to New Threats
• (45:13) Conclusion and Final Thoughts

To get future episodes and the latest threats sent straight to your inbox, join the All Things Human Risk Management Newsletter:⁠ https://hoxhunt.com/all-things-human-risk⁠

Resources:

• Guide to behavior-based training: https://hoxhunt.com/blog/behavior-based-cyber-security-training
• 4 essential metrics to start tracking: https://hoxhunt.com/blog/4-essential-phishing-metrics

Host links:

Eliot Baker: https://www.linkedin.com/in/eliotebaker/

Maxime Cartier: https://www.linkedin.com/in/maximecartier/

****

All Things Human Risk Management is a Hoxhunt Original Podcast.

Hoxhunt is the Human Risk Management platform that goes beyond security awareness to drive behavior change and measurably lower risk.

Data breaches start with people, so Hoxhunt does too. It combines AI and behavioral science to create individualized micro-training experiences people love.

Hoxhunt works with leading global companies such as Airbus, IGT, DocuSign, Nokia, AES, Avanade, and Kärcher and partners with leading global cybersecurity companies such as Microsoft and Deloitte.