Personnel Risk

We often don’t think about personnel risk whenever we're doing our risk assessment. However, it’s a really important thing to consider as our employees within our organization can bring about a broad range of risks. For example, company culture. Why do people want to work at your organization? If that company culture suddenly disappears or declines, you run the risk of one of your employees becoming disgruntled and, potentially, launching an internal attack. Another aspect to consider is social engineering and phishing. If we don’t train our employees, then they are at risk of clicking on malicious emails or giving out their passports over the phone to harmful actors. These are just two of the important risks to consider whenever we talk about our personnel risk. 

Related Videos