HRM-CORE-01Term
Human risk
The likelihood and impact of a security loss that a person's action or inaction gates. It combines the threats that reach a person, the access the person holds and the behaviors the person shows.
Example
A finance manager who approves payments, receives impersonation emails and clicks a simulated lure carries more human risk than a colleague with none of the three.
Also called
7How analysts, standards and vendors name the same idea.
- human elementVerizon DBIRUse only with a DBIR citation. The DBIR counts breaches where a person was a gating factor in one of the actions.
- human factorENISA
- human factorHoxhunt
- human layerMimecastThe "eighth layer" above the seven-layer OSI stack.
- people-centric security riskProofpoint
- human cyber riskCybSafe
- workforce riskLiving SecurityThe security risk introduced by all identities that interact with systems, data and applications; includes AI agents.
Sources
4Related terms
8"Human risk" (HRM-CORE-01), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/human-risk
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.