Report by Living Security
2025 State of Human Cyber Risk Report
4 FINDINGSPublished Jul 22, 2025
View Original Report →Key Findings
Organisations relying solely on security awareness training (SAT) have visibility into only 12% of risky behaviour.
Human riskSATSecurity awareness training
Just 10% of employees are responsible for 73% of cyber risk. This also means that a small fraction of employees (specifically 10%) are responsible for 73% of risky behaviour.
Human risk
Mature HRM programmes have 5 times the visibility into risky behaviour compared to organisations relying solely on SAT.
Human riskHRM
Strategic Human Risk Management (HRM) programmes can reduce risk 60% faster than traditional methods.
Human riskHRM