Coming soon
The human risk framework for the AI era.
An animated diagram of the framework: 137 signals in nine risk domains connect to 24 cohorts, 11 sequences and 10 breach scenarios. The 11 sequences light one at a time, from the first signal to the breach scenario it leads to:
- Phish to takeover, 72 hours. Breach scenario: Credential abuse & account takeover.
- Leak to login, 30 days. Breach scenario: Credential abuse & account takeover.
- MFA fatigue, 24 hours. Breach scenario: Credential abuse & account takeover.
- Help-desk takeover, 24 hours. Breach scenario: Credential abuse & account takeover.
- Click to execution, 7 days. Breach scenario: Ransomware & malware intrusion.
- Stealer to ransomware, 95 days. Breach scenario: Ransomware & malware intrusion.
- Quiet exit, 30 days. Breach scenario: Insider & privilege misuse.
- Shadow AI drift, 30 days. Breach scenario: Shadow AI & agent misuse.
- Approver under attack, 14 days. Breach scenario: BEC & payment fraud.
- Dormant to dangerous, 14 days. Breach scenario: Insider & privilege misuse.
- Consent to compromise, 90 days. Breach scenario: Third-party, OAuth & supply chain.
From the pioneers of human risk management. An open framework mapped to NIST CSF and MITRE ATT&CK that covers your people and the AI agents working beside them.
Talk to Living Security