Human risk management (HRM) is a data-driven approach to identifying, measuring and reducing the cybersecurity risk created by human behaviour in an organisation. It measures behaviour, which is why the reporting rate is a more meaningful metric than the click rate, and platforms differ widely in channel coverage, deepfake capability and data sovereignty.
