Human Risks

I'm in the UK this week meeting with clients. It's expensive and time-consuming, and it doesn't scale. You'd think software companies would avoid this. But we keep doing it because the feedback is completely different when you're in the room. At GSK, we're spending 2-3 hours going through product strategy and getting hands-on feedback. Not just from their security chiefs, but from the on-site teams who actually use our system out on their sites. That's the part most software companies miss. The people who sign the contracts aren't always the ones living with your product decisions every day. The teams tell us what's working, what's frustrating, how they're actually using the features. That's worth more than any survey or support ticket. HSBC is also hosting a networking event with an intelligence firm and invited us along. Looking forward to that. It's not efficient. But it's how you build products people want to keep using.

My first job as head of security was at a company that had just lost €8 million in a single night. In August 2008, robbers drove a wheel loader straight through the wall of Dansk Værdihåndtering. They'd set fire to eleven stolen garbage trucks to block the roads, scattered spike strips on the motorway, and disappeared. It's still the largest robbery in Danish history. I came in afterwards, and the brief was simple → This must never happen again. That turned out to be a long list of unglamorous work. New routines for the drivers, down to stickers on the dashboard reminding them what to do and in what order. A new Danish security standard on its way that we had to meet. There were periods where the only thing that mattered was getting through the next few weeks without incident. One of the things we did was ring the building with shipping containers filled with soil, borrowed straight from how we built camps in the military. Heavy enough that nothing was driving through them. None of it was sophisticated. It was mostly about doing a lot of ordinary things properly and consistently.

New Case Study Live! 🚨 We’re proud to share how Crane Currency, a global leader in secure banknote printing and anti-counterfeit technologies, is using Human Risks to strengthen compliance, resilience, and communication across teams. 🌍 They’ve moved from scattered spreadsheets to a more connected, transparent way of managing risks, and it’s making a real difference. 👉 Check out the full story here: https://lnkd.in/d2rdy2c3 #FinancialSecurity | #RiskManagement | #Compliance | #CaseStudy

Our new playbook is out: Bridging the Resilience Gap! 📘 Download now 👉 https://lnkd.in/eiK6-u_D Resilience gap is the gap between compliance monitoring and actual capability. 70% of organisations have an operational resilience programme. Fewer have one that actually works. This paper gives security and resilience teams a guide to close that gap: 🔹 Build a criticality framework leadership will act on 🔹 See why governance fails (and what to do about it) 🔹 Report resilience in a way that enables decisions 🔹 Get CER, NIS2 and DORA overview for your programme Read it here: https://lnkd.in/eiK6-u_D

How do you make sure security is seen as an enabler of growth and resilience, rather than just another cost to manage? Join us for a practical session on building a security programme that speaks the language of the business. Learn how to communicate security value in business terms, translating risks, controls, and investment into measurable outcomes. See you on October 22nd at 14:00 pm CET! 👉 Save your spot now!

What does your security programme mean to the business? As the future budget allocations are being discussed, the window to prove security’s business value is narrowing. On October 22nd, join Magnus Josias and Douglas G. for a conversation about how to effectively communicate the value of security to key stakeholders. In this session, you'll learn: → How to align security with enterprise objectives → How to communicate security value in business terms → A practical template for prioritising your security plan 👉 Save your spot now!