Calling employees a "human risk" is costing your security program before training even starts.

David Shipley, CEO of Beauceron Security, makes the case for reframing the whole category on the Digital Trust podcast.

• "Human Risk Management" signals to employees they're liabilities, not assets — it's demotivating by design
• The goal is helping people make good choices with technology, not minimising the human
• New employees are higher risk than any specific role; target behaviour, not job title
• Security Awareness data shows over-training suppresses reporting rates
• The answer is frequency, not volume

Hosted on Acast. See acast.com/privacy for more information.