Human Risk Review 2024

When SoSafe was founded six years ago, they challenged the status quo that labeled humans as the weakest link in security. Early security awareness and training (SA&T) relied on compliance-focused videos, which failed to foster real behavioral change. Recognizing people as complex individuals with emotions and motivations, they championed experiential and conversational learning to engage employees as allies in cyber resilience.

Despite a market fixated on basic compliance, the landscape has shifted dramatically. Information overload, shrinking attention spans, geopolitical turmoil, and a vast shortage of cybersecurity professionals have heightened the pressure on security teams. Burnout is rampant, and cybercriminals are exploiting these vulnerabilities with advanced tactics like AI-generated phishing and deepfake attacks.

This report reveals the urgency of transforming human layer security. As attackers target humans, companies must prioritize building a positive security culture. Moving beyond traditional SA&T to human risk management is essential for holistic resilience. If you're ready to embrace this change, this report is for you.