Abstract:
This paper investigates the complex challenges faced by professionals in managing cyber risks during the implementation of human risk management programs. Emphasizing the crucial role of human behavior in effectively mitigating cyber risks, the paper highlights the transformative impact of utilizing the „Golden Circle” methodology. This methodology, which is based on a people-centered approach, initiates conversations starting with „WHY”, articulating the core purpose of the human risk management process and advocating for an „inside-out” approach. By fostering a sense of responsibility and belief in the mission among participants, this approach promotes the sustainability of human risk management practices.