Risk Profiles: Why Some Employees Attract Danger and Others Dodge It
summary
Uses Elevate Security customer data covering 67,000 employees to show concrete risk patterns: 75% of managers get at least one phishing email monthly and median manager-targeted phishing is 14/month versus 6 for individual contributors; tenured emails rise until ~15/month at 10 years. A small fraction causes most harm: 4% cause ~80% phishing clicks, 3% cause ~92% malware. Cognitive load, time of day and department (customer service ~22% risky) drive susceptibility. Advises using email/identity/endpoint logs to segment users into low/medium/high risk and apply targeted safety nets (shorter MFA windows, password managers, hardened devices, stricter mail filtering).
AI-written summary · about
chapters (10)
- 0:00Employee risk profiles
- 1:48Human imperfections in security
- 7:32Who gets attacked more
- 15:59Who is more likely to fall for phishing attacks
- 25:49Gender and age patterns
- 30:30Past behavior predicts mistakes
- 34:56Time of day vulnerability
- 37:29Reliable risk factors
- 41:08Managing employee risk
- 45:28Q&A
related talks
54mEmployees Are the New Perimeter- How the Pandemic Shaped Workforce Risk
40mLeveraging Human Risk Data to Strengthen Cyber Resiliency
27mBlunting the Phisher's Spear: A Risk-Based Approach...
30mGetting Engagement in the Midst of Chaos
41mHook, Line, & Sinker - Addressing the Human Risk of Phishing and How to Avoid the Bait
30mSecurity Awareness with a Remote Team
41mHuman Vulnerability Management and Assessment in the Age of Zero Trust
01h 07mKeynote Presentation Blinded by “the weakest link” A New Perspective on Human Risk