Human Layer Security Maturity model

The cyber security industry is dominated by commercial solution offerings that address process and technology risk. In contrast, people-oriented security solutions usually involve training and awareness tools designed to help employees make better security decisions. Such solutions are important but insufficient to ensure optimal protection of the so-called human layer in a typical business environment.

Human-layer security encompasses people, processes, and technology that allow organization to manage risk, including insider risk, which is typically very difficult for organizations to manage for myriad reasons.

To better understand how organizations are handling human-layer security and allow companies to self-assess their people-oriented security maturity posture, the following survey asks a series of questions that form the basis of the model.

Your answers are appreciated and will be kept confidential.