What Do HR and Psychology Have to Do With Cyber Threats?
What Do HR and Psychology Have to Do With Cyber Threats?

Where is the Real Threat?

In the internet world festooned with apps we know it’s important to use strong passwords to secure our own email, social media accounts, and electronic devices. On the corporate side, another important consideration is the role that humans play in cyber threats. People with access to big data, personal information, intellectual property (IP), and critical infrastructure (e.g., power supplies, water treatment, hospitals, railways) can sometimes be the weak link in the chain.

HR as Part of Risk Management

Person and Binary Computer CodesFor a while, I’ve been thinking about cyber crimes and cybersecurity and how to adapt what I learned and applied when I worked in a very secure (Top Secret) environment. In that workplace, we were extremely careful about how people were hired. Also important was how they were treated after being hired. I call my adaptation of those processes and policies “HR as Part of Risk Management.” I’ll admit that this may not be a stylish title but it does address something that most approaches to risk management are missing.

Employees: Often the Weakest Link 

Ominous Dark Buildings

                          Consider a 360-degree Solution

Traditionally, risk management includes “human factors” but to date, relatively little attention has been paid to this source of risk. Normally, 90% of our collective efforts have focused on technical or IT-related interventions to protect us from cyber threats. Yes, these are important. However, to focus on them and not address the human element, psychology or employees’ behaviour is like locking the front door but leaving the back door open. The fact is that sometimes security breaches reported as cyber attacks are caused by actions that take place inside the organization. As Dermot Williams, the CEO of  IT security firm Threatscape says, “when it comes to organizations, often the employees who are the weakest link.”

Although I have a lot more to say on this topic, for now, I’ll share an article that I wrote called Is Cyber Security Alone Ever Enough?, published in FrontLine Security in October 2016. Take a few minutes and read.







If you’d like to see my more recent articles/podcasts on this topic, here are some updates:

Corporate Security Hinges on its People

Sources Of Insider Threats: They’re Not Always What You Think …

The Insider Threat Podcast


Contact me by email, phone, or via direct message on Twitter, Facebook, or LinkedIn if you’d like to discuss any of these topics or consultations in more detail.


More than career coaching, it’s career psychology®.


I/O Advisory Services – Building Resilient Careers and Organizations.™


Easily share this article using any of the social media icons below.Save

Latest Posts

A Snapshot of Black Psychologists in Canada

A Snapshot of Black Psychologists in Canada

Although the CPA did not believe collecting disaggregated demographic data was a priority, the Black Psychology Section executive members started to collect this data as an interim measure. The Section’s hope and expectation is that the CPA and the various provincial and territorial Colleges of Psychology will ultimately take on this responsibility since they are connected to all psychologists working in Canada through the process of accreditation.

Things to do after you’ve been laid off …

Things to do after you’ve been laid off …

Certain experiences are common, but that does not make them easy to manage. Being laid off is one of those problematic yet common experiences.
In this blog article, I’m offering some ideas to support the thousands of people who are dealing with being laid off.

Six Good Career Books to Add to Your Library This Year

Six Good Career Books to Add to Your Library This Year

Summer is a natural time to indulge in some new reading material. With summer reading in mind, here are six good career books worth adding to your library whether as a physical book you’ll want to highlight and underline, or as an audiobook, which is a great use of time when you’re driving, walking, gardening, etc.

Rethinking and Modernizing Executive Presence

Rethinking and Modernizing Executive Presence

As an executive coach, clients sometimes ask me for advice on how to develop their executive presence. And every now and then, someone will make it clear that they have a very narrow definition of executive presence — and it usually rubs me the wrong way. The unstated subtext is that “real executives” fit a certain template, and that template does not include certain types of leaders, despite being accomplished and effective.  Thankfully, after so many years of tech executives capturing headlines and broad attention, attitudes have certainly shifted — and the dress code has definitely evolved.