What is human risk management (HRM)?
Human risk management (HRM) is the security discipline of finding which people, and which AI agents, are most likely to cause a breach, acting on that risk with the right control or coaching, and measuring whether it went down. It replaces training on a calendar with action aimed by evidence.
How it works
An HRM program reads signals from the security tools an organization already runs: email security, the identity provider, web gateways, data loss prevention, endpoint and HR systems. It combines who attackers target, what each person could expose and what they actually do into a risk view for every identity.
From that view, the program acts where risk is building: a phishing simulation for one group, a short module for another, a manager nudge, or a control change such as step-up authentication for a high-access user. It then reports whether the risk moved.
Why it matters
Most people-driven risk is concentrated. In the 2026 State of Human Risk research with the Cyentia Institute, three-quarters of risky behavior came from 10% of the workforce, and two in three of that group were new to the list. A program that treats everyone the same, once a year, spends most of its effort where the risk is not.
How Living Security helps
Living Security is the AI-native human risk management platform. It scores every person and AI agent in one Human Risk Index, Livvy explains who is driving risk and why, and playbooks act on it through the tools you already run. Your team approves what runs.
