Skip to main content
The Human Risk Index (HRI) helps security teams understand and prioritize human cyber risk. It brings relevant data into one consistent view so teams can decide where action will have the most value. HRI uses a 0–1000 scale. Higher values represent stronger vigilance and lower measured human cyber risk.

​
What HRI shows

HRI summarizes risk from three related areas:
  • Behavior — actions that can increase or reduce risk, such as training engagement, phishing responses, and data-handling activity
  • Threat — security threats and suspicious activity that affect a person or group
  • Identity — access, authentication, and privilege factors that can change exposure
The platform uses signals from connected data sources to form these views. Available inputs depend on the systems that an organization connects and the data that those systems report.
HRI is a decision aid. Use it with business context and security expertise. It does not replace an investigation or make an employment decision.

​
How HRI works

1

Collect relevant activity

Connected systems provide activity about security behavior, threats, training, and identity.
2

Map activity to signals

The platform maps source activity to defined signals. A signal has a stable meaning even when more than one data source can provide the underlying activity.
3

Normalize the evidence

The platform accounts for differences in source data so teams can review related evidence in a consistent form.
4

Summarize risk and change

HRI combines the available evidence into an overall view and supporting components. Trends show whether the measured risk is improving, declining, or stable.

​
How teams use HRI

​
Prioritize action

Use HRI with signal details to find people or groups that can benefit from a focused action. Review the supporting evidence before you start a playbook or other response.

​
Compare groups

Review departments, locations, or other cohorts to find patterns. Compare groups only when their context and available data are suitable for comparison.

​
Measure progress

Track direction over time to understand whether a program is reducing measured risk. A change in connected data or workforce coverage can also affect results, so review those changes with the trend.

​
Report program outcomes

Use organization and cohort views to explain priorities, actions, and progress to program stakeholders. Use the supporting signals to give context for a change.

​
Interpret HRI with care

  • Review the signals behind a score or trend.
  • Confirm that the expected data sources are connected and reporting.
  • Consider the person’s role, access, and work context.
  • Compare like groups over a suitable period.
  • Do not treat one event or one score as a complete risk assessment.

​
Common questions

HRI changes as the platform processes relevant data from connected sources. The timing depends on the source, its reporting schedule, and the activity that is available.
New signals, changes in existing activity, or changes in data coverage can affect HRI. Review the supporting signal history and confirm that the expected data sources are reporting.
There is no universal target for every organization. Set a target that fits your risk tolerance, data coverage, workforce, and program goals. Measure progress against a stable baseline and documented program outcomes.
Direct comparison can be misleading because organizations can have different workforces, risk tolerances, data sources, and program designs. Use consistent internal baselines and comparable cohorts when you measure change.

Signal Library

Learn how the platform turns source activity into defined signals.

Glossary

Review common platform terms.

Platform overview

See how the platform supports a human risk management program.

Trust Center

Request access to security and compliance evidence.