Get involvedVersion 2.0CC BY 4.0
Get involved
Suggest changes, contribute, cite the framework, use the data and get updates.
Suggest a change
Every signal, indicator, cohort, sequence, breach scenario and risk domain page has a "Suggest a change" button. It records the entry for you, so you only write what is wrong or missing. For anything else, send general feedback here.
Send proposals and questions about the framework through Suggest a change.
Cite the framework
Cite the version you used, and keep the identifiers (for example SE-B-04 or HRM-MEAS-03) when you quote an entry, so readers can find the canonical definition. Every entry page has its own citation.
Living Security. Human Risk Management Framework 2.0.0. 2026-10-29. https://www.humanriskmanagement.com. Licensed CC BY 4.0.Use the data
The whole framework is open data under CC BY 4.0: signals, indicators, cohorts, sequences, breach scenarios, risk domains, key terms, the maturity model and the NIST CSF 2.0 and MITRE ATT&CK mappings, as CSV and JSON. Load it into your own tools, a GRC system or a policy repository. Credit the source when you do.
Get updates
Hear when a new version is published and what changed in it.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.