Human Awareness in Cybersecurity: Low Hanging Fruit?
In this video, the speaker argues that while decades of investment have poured into technical cybersecurity controls—firewalls, applications, and other tools—only a tiny fraction has been allocated to the human element. He cites that over 95% of data breaches are caused by human actions rather than technology failures, indicating a severe imbalance. The speaker calls for a shift in focus toward user awareness, describing it as low‑hanging fruit that requires modest, time‑based interventions rather than large financial outlays. He recommends foundational, inexpensive measures such as a five‑minute training session each month, an in‑person training session each quarter, and regular ethical phishing simulations to test and improve workforce resilience. These practices, he asserts, should be considered “table stakes” for any organization seeking to reduce the majority of incident vectors that stem from human error.
