KPMG Human Risk Management

The questions to ask yourself are:

• Is your existing program effective?
• Can you measure change in user behaviours (not just phishing)?
• Can you show data driven return on investment from your cyber engagement, change and influence program?
• Are you currently using proven ways to accelerate the consolidation of learning?

We use leading technology and a multi-faceted approach to create lasting change in your organisation. Drawing on principles in change management, learning, neuroscience, communications and marketing – our program addresses your biggest risks and facilitates lasting behaviour change. The results are measurable and can be reported to demonstrate return on investment.

KPMG HRM’s Human Risk Index uses API integration to identify risky behaviours before they cause an incident. This data can be viewed 24/7 through a dashboard and can be broken down by staff role, geography and team – or you can view the human risk index score for the whole organisation.

Once a cluster of risky staff behaviours has been identified, KPMG HRM can deliver tailored and targeted training to your user group to educate them on safe cyber security behaviours. The Human Risk Index dashboard helps you measure, quantify, track and report the change in behaviour. You can share this data with your executives and the board to show return on investment.

We start with discovery and then deliver an annual work plan that is based on your organisational key risks, priorities in your cyber security strategy and level of maturity. Not all offerings may be appropriate and we take that into consideration when designing a program that is right for you.

Cyber escape rooms are a new and immersive way to drive cyber security capability uplift in a dynamic and fun way using gamification, team work and problem solving skills. This can be organised in a virtual or in-person setting.

A phishing simulation education program provides both enterprise-wide and targeted phishing campaigns. KPMG HRM will analyse the data, provide monthly reporting, and deploy training to users who are falling victim to phishing simulations. HRM also targets repeat clickers by strategically adjusting the approach. All training is highly targeted to address the specific risks of different user groups in your organisation, such as privileged access users.

KPMG HRM has been designed with flexibility and ease in mind. To remove the burden of delivery, HRM can be executed entirely by KPMG on your behalf. If you want to retain full control, it can be executed by your organisation and supported by KPMG.

KPMG HRM gives you access to pre-packaged content, plug and play training, behaviour assessment, human risk management analytics and gamified experiences like cyber escape rooms to provide you with a hit-the-ground-running capability you can leverage and benefit from immediately.

Accelerators establish an annual cyber influence, engagement and communication program at pace to ensure all of your stakeholders are being appropriately engaged in order to keep security front of mind and ensure all employees are taken on the journey.

Amplifiers is where the capability consolidation is amplified; targeted and powerful services to drive a specific capability and behaviour change – for example, human risk index, compliance training, escape room, phishing, etc.

KPMG HRM is not a training and awareness program – it is so much more. No matter your level of cyber security maturity, HRM offers you next generation capability for engaging, motivating and changing your staff behaviours when it comes to safe online practices. HRM goes beyond conventional training and awareness to create an annual cyber behaviour change program which is steeped in human risk management and utilises globally leading capability.