HRM-INT-01Term
Intervention
An action a program takes on a person, cohort or control because of measured risk: training, a nudge, coaching, a simulation, a control change. Interventions are logged so their effect can be measured.
Example
After a Critical cohort forms, the program owner sends a nudge, enrolls the member in role training and asks IT to require phishing-resistant MFA.
Also called
4How analysts, standards and vendors name the same idea.
- policy and training interventionsForresterThe second of the four parts of the Forrester definition.
- interventionENISAThe awareness, analysis and intervention model.
- Intervention HubSoSafe
- targeted interventionHoxhunt
Sources
4Narrower terms
18- Awareness training
- Role-based training
- Behavior-triggered training
- Phishing simulation
- Nudge
- Just-in-time coaching
- Microlearning
- Security champions program
- Policy acknowledgment
- Tabletop exercise
- Notification drill
- Adaptive control
- Playbook
- Targeted campaign
- Culture pulse survey
- Recognition
- Help-before-you-build channel
- Exception review
Related terms
4"Intervention" (HRM-INT-01), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/intervention
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.