BDimension
Behavior
Behavior is what a person does. Risky behaviors such as clicks, password reuse, bulk downloads and control bypasses raise risk; vigilant behaviors such as reporting, declining, verifying out of band and enrolling strong MFA lower it. Both count, and both are measured from telemetry, with simulations as practice.
Example
The same analyst reports a real phish within the hour.
A risky behavior in a simulation or in hygiene telemetry moves a person to Stage 2 Susceptible; a risky behavior against a real threat moves them to Stage 3 Exploited. A vigilant behavior steps a person back one stage.
Behavior signals by domain
9"Behavior" (B), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/dimensions/behavior
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.