Resources
Human risk management resources
Definitional and comparative resources on human risk management, security awareness, and audit-ready evidence aligned to NIS2, ISO 27001, SOC 2, and NIST CSF. Written for security and compliance leaders evaluating how to measure and govern human risk.
Definition
What Is Human Risk Management?
A definition of human risk management, how it differs from security awareness training, and the behavioral evidence it produces. Mapped to NIS2, ISO 27001, SOC 2, and NIST CSF, with the Human Risk Evidence Map as a practical model.
Comparison
Top Human Risk Management Tools for Mid-Size Companies
How KnowBe4, Hoxhunt, CybSafe, and SafeHabits compare on operating model, internal effort, deployment time, and compliance evidence model. A 2026 buyer's guide for security and compliance leaders.
Compliance
Compliance Evidence for Security Awareness Training
What NIS2, SOC 2, ISO 27001, and NIST CSF actually require as evidence for security awareness and human risk programs. Includes a side-by-side comparison of completion-style records and audit-ready behavioral evidence.