CR-SC-01Level 2 · Cohort
Overconfident clicker
- Risky
- Hard
- Security culture
- Level 2 · Cohort
People whose self-rated ability in the pulse survey exceeds their results and who clicked a simulated phishing link.
Classification
- Risk domain One of 9 areas of human risk, from social engineering to readiness and response. Every signal belongs to one.
- Cohort class
-
- Risky
- Difficulty
-
- Hard
A cohort is Easy when every one of its signals is available from standard connectors, Medium when any signal needs setup and none needs an integration or a survey, and Hard when any signal needs an integration or a survey.
- Dimensions Every signal answers one of 3 questions.
- Evidence level
- Maturity practices One capability a program performs, scored on its own: See, Understand, Act, Prove, Govern and Culture.
- Leads to The kind of breach the evidence beneath it points toward, each anchored to a Verizon DBIR or VERIS pattern or an FBI IC3 category.
- NIST CSF 2.0 (from its signals)
-
- ID.IM-03
- PR.AT-01
- MITRE ATT&CK (from its signals)
-
- T1204.001
The definition, in detail
Definition
Overconfidence is the gap the program has to close before more training will land.
Example
An IT manager who rated himself an expert in the last pulse clicked a simulated document-share link the following month.
How it is measured
- Formula
- SC-B-01 + SE-B-01
- Class
- Risky
- Difficulty
- Hard: at least one signal needs an integration or a survey
- Risk domain
- Security culture
- Sources
- Pulse survey, Awareness & phishing simulation
How it is used
Programs count the people who match SC-B-01 + SE-B-01 at once as a risky cohort in Security culture, trend that population, and point the response at it; it feeds 1 breach scenario.
Membership is evidence that the signals in the formula describe the same person at once. It is a population to act on; on its own it confirms no incident.
Continue exploring
"Overconfident clicker" (CR-SC-01), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/cohorts/cr-sc-01-overconfident-clicker
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · Version history. This page describes one cohort.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.