·
Your Employees Aren’t the Enemy: Rethinking Human Cyber Risk
Why effective security awareness focuses on behavior and systems instead of finding someone to blame There is a familiar scene in cybersecurity training. An employee receives a simulated phishing email. It looks surprisingly convincing. Maybe it appears to come from a vendor they recognize. Maybe it creates just enough urgency to catch them between a…