---
title: "Human risk and cybersecurity blog | Whalemate"
description: "Articles, analysis and resources on human risk management, awareness and cybersecurity for LATAM teams. The Whalemate blog."
url: https://www.whalemate.com/en/resources/blog/2/
lang: en
alternates:
  es: https://www.whalemate.com/recursos/blog/2/
  pt-BR: https://www.whalemate.com/br/recursos/blog/2/
index: https://www.whalemate.com/llms.txt
---

Blog

# Human risk and cybersecurity blog

Guides and analysis for CISOs, IT and compliance teams in LATAM who need to explain the human factor — and decide what to do about it.

[All](https://www.whalemate.com/en/resources/blog/) [Awareness](https://www.whalemate.com/en/resources/blog/topic/awareness/) [HRM](https://www.whalemate.com/en/resources/blog/topic/hrm/)

![PCI DSS 12.6 Requires Vishing Coverage](https://lvaxvhnlaeradaprhyqy.supabase.co/storage/v1/object/public/editorial/blog-covers/pci-dss-12-6-requires.webp)

HRM

Sep 16, 2026
[By Federico Hombre](https://www.whalemate.com/en/resources/blog/author/federico-hombre/)

## [PCI DSS 12.6 Requires Vishing Coverage](https://www.whalemate.com/en/resources/blog/pci-dss-12-6-requires/)

Vishing and smishing are voice and SMS phishing. Under PCI DSS 12.6, measuring only email or course completion leaves a compliance gap.

Read more

![APWG and PCI DSS: Smishing Is Rising](https://lvaxvhnlaeradaprhyqy.supabase.co/storage/v1/object/public/editorial/blog-covers/apwg-pci-dss-smishing-rising.webp)

HRM

Sep 11, 2026
[By Federico Hombre](https://www.whalemate.com/en/resources/blog/author/federico-hombre/)

## [APWG and PCI DSS: Smishing Is Rising](https://www.whalemate.com/en/resources/blog/apwg-pci-dss-smishing-rising/)

Smishing is growing on mobile channels while PCI DSS v4.0 requires annual awareness training and explicit phishing and social engineering content.

Read more

![Security awareness training: measure clicks, not courses](https://lvaxvhnlaeradaprhyqy.supabase.co/storage/v1/object/public/editorial/blog-covers/security-awareness-training-measure-clicks.webp)

HRM

Sep 7, 2026
[By Federico Hombre](https://www.whalemate.com/en/resources/blog/author/federico-hombre/)

## [Security awareness training: measure clicks, not courses](https://www.whalemate.com/en/resources/blog/security-awareness-training-measure-clicks/)

NIST, UC San Diego, Frontiers, Verizon and SANS agree that annual training alone is not enough. The useful metric is sustained behavior.

Read more

![ISO, NIST, SANS, Verizon on phishing training](https://lvaxvhnlaeradaprhyqy.supabase.co/storage/v1/object/public/editorial/blog-covers/iso-nist-sans-verizon-phishing.webp)

Awareness

Sep 7, 2026
[By Federico Hombre](https://www.whalemate.com/en/resources/blog/author/federico-hombre/)

## [ISO, NIST, SANS, Verizon on phishing training](https://www.whalemate.com/en/resources/blog/iso-nist-sans-verizon-phishing/)

ISO calls for a continuous program for all employees, NIST and SANS make it measurable, and Verizon shows the risk happens in seconds.

Read more

![Whalemate: Human Risk Management platform](https://lvaxvhnlaeradaprhyqy.supabase.co/storage/v1/object/public/editorial/blog-covers/whalemate-hrm-security-awareness.webp)

HRM

Sep 3, 2026
[By Federico Hombre](https://www.whalemate.com/en/resources/blog/author/federico-hombre/)

## [Whalemate: Human Risk Management platform](https://www.whalemate.com/en/resources/blog/whalemate-hrm-security-awareness/)

Whalemate frames security awareness as Human Risk Management, not a standalone course. CIS, NIST, SANS, and recent studies show mixed results.

Read more

[Previous](https://www.whalemate.com/en/resources/blog/)
[1](https://www.whalemate.com/en/resources/blog/)
2
Page 2 of 2
Next