Balancing Fear and Confidence: A Strategic Approach to Mitigating Human Risk in Cybersecurity

Abstract

Despite technological advances aimed at preventing them, cybersecurity breaches have grown more numerous and costly over time. Current training programs and policies, for their part, have been largely ineffective in reducing cyberthreats, as human actions continue to be the weakest link. This article urges organizations to make greater efforts to warn employees about cybersecurity dangers and help employees improve their confidence in their ability to defend against such dangers.