This section focuses on human risk management by describing strategies and best practices to mitigate the risk of human error and malicious actions that may compromise system security.
There is no doubt that humans can be considered the weak link in information security, but they can also become the last bastion of security by implementing the best practices in this area.
This involves mitigating human risks by putting means in place not only to train your employees but also to know and manage their strengths and weaknesses better. Policies, procedures and guidelines covering human risk management must be rolled out as envisaged by, for instance, the ISO 27001 standard.
