Human Risk Management: Playbook for repeat offenders

This playbook provides a structured approach to mitigating risks associated with repeat offenders, or users who consistently engage in risky security behaviors despite prior interventions. It outlines strategies to address these behaviors while fostering a culture of accountability and continuous improvement. Learn strategies to protect repeat offenders from sophisticated threats. Here’s what you’ll find in the playbook:

Key components:

1. Risk scenarios and business impact:
   1. Scenarios include repeated failures in phishing simulations, violations of security policies, and triggering automated security alerts.
   2. Business impacts range from increased cyberattack risks and data breaches to financial fraud, compliance violations, and reputational damage.
2. Targeted security outcomes:
   1. Raise friction for repeat offenders: Introduce stricter controls and oversight.
   2. Shield high-risk users: Apply enhanced security measures like email filtering and access restrictions.
   3. Encourage behavior change: Use targeted nudges, justifications, and training to guide users toward better practices.
3. Control strategy and phased implementation:
   1. Phase 1: Visibility & nudging – Monitor behaviors, provide visual cues, and educate users with just-in-time nudges.
   2. Phase 2: Targeted enforcement – Introduce friction through stricter policies, such as requiring justifications for risky actions and escalating oversight.
   3. Phase 3: Hard controls – Enforce high-confidence controls, including outbound message reviews, automated containment actions, and access restrictions.