Your home for Human Risk Intelligence insights
Fresh insights, updates, and practical tips for tackling human risk.
.png)
5 min read
PCI DSS v4.0.1: Reducing Human Risk in Cardholder Data Environments with HRI
This article explores how the updated PCI DSS standard places greater emphasis on ongoing security awareness, role-based training, and measurable risk reduction. It introduces Human Risk Intelligence (HRI) as a practical framework for identifying, measuring, and reducing human risk by assessing individuals across four key dimensions: Target Value, Awareness, Hygiene, and Access. The blog also outlines a five-phase roadmap for embedding HRI into PCI DSS compliance, helping organisations move beyond checkbox compliance towards stronger security outcomes. As regulatory expectations continue to evolve, Human Risk Intelligence enables organisations to build lasting cyber resilience while strengthening customer trust and protecting cardholder data.
Yu Ling Lok
.png)
5 min read
10 security awareness platforms compared for 2026
Compare the best security awareness platforms for MSPs in 2026. See how 10 platforms handle training, phishing simulations, policy management, dark web monitoring, reporting, and human risk visibility across multiple clients.
Kerryn Zendera
5 min read
Blog: Episode 6 of The usecure Show is Now Live
This month's episode is all about helping MSPs reduce admin, strengthen security awareness and deliver more value to clients.
Annie Shah
5 min read
MSPs Manage Human Risk. MIPs Turn It Into Intelligence.
Understand why human risk is the right place for MIPs to start building operational maturity, and what repeatable, automated delivery actually looks like in practice.
.avif)
Jordan Daly
.png)
5 min read
Breach Secure Now alternatives: 10 security awareness platforms compared for 2026
Compare the best Breach Secure Now alternatives for MSPs, including platforms for security awareness training, phishing simulations, policy management, dark web monitoring, reporting, and human risk management
Kerryn Zendera
5 min read
From MSP to MIP: Why Managed Intelligence Needs Human Risk Intelligence (HRI)
As MSPs move toward becoming Managed Intelligence Providers, they need visibility into more than tools and tickets. This post explores how Human Risk Intelligence helps MSPs manage people, behaviour, identity risk, and client outcomes as part of a stronger managed service.
Jordan Daly
5 min read
CIS Controls v8: How the Four Pillars of Human Risk Intelligence Directly Map to the 18 CIS Controls
CIS Controls v8 provides organizations with a proven framework for improving cybersecurity, but it doesn't identify which individuals pose the greatest human risk. This is where Human Risk Intelligence (HRI) bridges the gap. Built around four core pillars—Target Value, Awareness, Hygiene, and Access—HRI continuously identifies who attackers are most likely to target, who is most likely to fall for an attack, who is easiest to compromise, and which compromised accounts would cause the greatest damage. This article explains how each HRI pillar aligns directly with specific CIS Controls, transforming compliance activities into measurable risk reduction. Using current breach data and real-world attack trends from 2024 and 2025, it demonstrates how organizations can integrate human risk intelligence into their CIS implementation strategy to strengthen security awareness, improve identity hygiene, reduce privilege-related risk, and build a continuously adaptive security program.
Yu Ling Lok
.png)
5 min read
5 Key Takeaways from Pax8 Beyond 2026 MSPs and MIPs Should Be Paying Attention To
For those who could not attend, or for those still processing everything they heard in Utah, here are five of the biggest takeaways from the event, what they mean for MSPs, and why they matter in the wider shift from Human Risk Management (HRM) to Human Risk Intelligence (HRI).
Hetty Roach
.png)
5 min read
Phin Security alternatives: 10 security awareness platforms compared for 2026
Compare the best Phin Security alternatives for 2026. Explore 10 security awareness training and phishing simulation platforms, including usecure, KnowBe4, Hoxhunt, MetaCompliance, and more for MSPs, SMBs, and IT teams.
Kerryn Zendera