Three dimensions instead of one click rate
Knowledge, behaviour and culture enter the index with separate weights. The weights are configurable per tenant.
Awareness & E-Learning
Human Risk
Measure people without monitoring them
The human security level is usually either not measured at all or reduced to a single click rate. The Human Security Index instead condenses three dimensions into one figure from 0 to 100: knowledge from completed training, behaviour from phishing simulations, and lived security culture from two-factor authentication, genuine suspicious-mail reports and acknowledged policies. The hard part is not the formula but the data protection around it. That is why individual personal scores are switched off by default.
ISO 27001NIS2DSGVO
Features
Your benefits
No zero for missing data
A dimension without a data basis drops out of the weighting instead of counting as zero and artificially depressing the index.
Co-determination is built in
Individual personal scores are off by default and become visible only after explicit release. Evaluations below the minimum group size remain fully suppressed.
Development instead of a snapshot
A cockpit shows the current level and the time series. Security notices can be issued in a targeted way and documented with proof of acknowledgement.
Capabilities
Capabilities in detail
- Human Security Index as a figure from 0 to 100
- Knowledge dimension from completed training
- Behaviour dimension from phishing simulations
- Culture dimension from 2FA, suspicious-mail reports and acknowledged policies
- Dimension weighting configurable per tenant
- Dimensions without a data basis drop out of the weighting
- Cockpit with current level and time series
- Index snapshots for tracking development
- Individual personal scores switched off by default
- Configurable minimum group size for evaluations
- Release of the personal view as a co-determination-bound step
- Security notices with proof of acknowledgement
Result
A robust metric for how securely your organisation actually behaves, one that withstands a co-determination review.
Experience Human Risk live
Schedule a no-obligation demo – we will show you the module with your own use cases.