Resources
Human risk management resources
Definitional and comparative resources on human risk management, security awareness, and audit-ready evidence aligned to NIS2, ISO 27001, SOC 2, and NIST CSF. Written for security and compliance leaders evaluating how to measure and govern human risk.
Definition
What Is Human Risk Management?
A definition of human risk management, how it differs from security awareness training, and the behavioral evidence it produces. Mapped to NIS2, ISO 27001, SOC 2, and NIST CSF, with the Human Risk Evidence Map as a practical model.
Comparison
Top Human Risk Management Tools for Mid-Size Companies
How KnowBe4, Hoxhunt, CybSafe, and SafeHabits compare on operating model, internal effort, deployment time, and compliance evidence model. A 2026 buyer's guide for security and compliance leaders.
Comparison
KnowBe4 vs Hoxhunt for Human Risk Management (2026)
A sourced 2026 comparison of KnowBe4 and Hoxhunt across pricing, automation, phishing simulations, measurement, reporting, and operating model, with a methodology note and a shortlist framework.
Compliance
Compliance Evidence for Security Awareness Training
What NIS2, SOC 2, ISO 27001, and NIST CSF actually require as evidence for security awareness and human risk programs. Includes a side-by-side comparison of completion-style records and audit-ready behavioral evidence.
Cost
What Security Awareness Training Really Costs
The per-employee software fee is only one of four costs. A breakdown of software, operating, evidence, and governance costs, a model to estimate your own total, and when a managed human risk program makes sense.