What is human risk quantification (HRQ)?
Human risk quantification is the practice of measuring the security risk that people create, in numbers that can be compared, trended and tied to business impact. It turns “our people are a risk” into which people, how much, and why.
How it works
Quantification draws on telemetry from security tools, not only training records: real phishing received, risky web and data activity, identity hygiene and the access each person holds. Models weigh those signals into a score per person, team and organization.
Good quantification is explainable. Each score traces back to the signals behind it, so the team can check it, act on it and show an auditor or a board how it was built.
Why it matters
Boards ask whether cyber risk is going down. Quantified human risk answers that question for the part of risk that people drive, and lets a team spend budget where it moves the number.
How Living Security helps
Living Security was named a Leader in the Forrester Wave™: Human Risk Management Solutions, Q3 2024. The Human Risk Index quantifies risk for every person and AI agent, with the evidence behind each score.
