[Video] Human Centric Security

Watch the webinar video recording on human-centric security with Proofpoint's Alexander Sebestian, delivered on Dec 5th 2024.

Alexander goes into the details on what are the dimensions of human risk and why a comprehensive solution is needed to address the whole story:

1. Threats, such as malware, credential phishing or business email compromise (BEC). Beyond detection, it's important to have the tools to assess the risk via phishing simulations, knowledge assessments and employee surveys, combined with targeted and threat-driven role related learning and finally progress monitoring.

2. Impersonation risk which is the threat of suppliers being compromised or spoofed with lookalike domains or domains not protected with DMARC and related technologies. This introduces a supply chain risk into the organization that has to be mitigated.

3. Data loss risk caused by either careless users (for ex. accidental disclosure when typing the recipient and selecting the unintended one from the autocomplete list), compromised or misconfigured systems.

4. Identity risk, typically arising from attackers' focus on subverting user authentication via account takeover (ATO). Compromising credentials (even multifactor ones) is very attractive for threat actors, as it lowers the bar of attack: it's much easier to login than break in.