Human Risk Management is the practice of identifying who is exposed, measuring how that risk evolves, and deciding the next intervention —simulation, content, channel, difficulty— with data. It doesn't replace awareness: it turns it into a managed program. At Whalemate the cycle is model context, simulate, train, measure, intervene and report.
HRM glossary
Human Risk Management (HRM)
Managing cyber risk with a focus on people's behavior, not on completing a course.
What is Human Risk Management (HRM)?
Cybersecurity — Cybersecurity is the ongoing management of cyber risk to understand it and reduce it.
Social engineering — Manipulating a person, not a system, to get an action or a piece of data.
Security awareness training — The category already installed: training people in cybersecurity. HRM is what comes next.
Phishing — NIST defines phishing as deceptive messages that trick people into clicking malicious links or downloading software.
HRM glossary
Questions about Human Risk Management (HRM)
What is Human Risk Management (HRM)?
Managing cyber risk with a focus on people's behavior, not on completing a course.
How does Whalemate use it?
Human Risk Management is the practice of identifying who is exposed, measuring how that risk evolves, and deciding the next intervention —simulation, content, channel, difficulty— with data. It doesn't replace awareness: it turns it into a managed program. At Whalemate the cycle is model context, simulate, train, measure, intervene and report.
Want to see HRM in your organization?
Book a demo and we'll look at the program with data from your industry.