Human Factors of Cybersecurity for Change Professionals
Description:
This course explores how identity, behaviour, and decision-making shape cybersecurity outcomes. Aimed at change professionals, it introduces the risks posed by both malicious and well-meaning insiders, as well as external attackers who exploit human error or trust. Learners will examine attacker personas and techniques, and learn how to design secure access processes by identifying users, verifying who they are, and limiting what they can do. The course also addresses privacy obligations, user data protection, and how to embed cyber awareness into change initiatives. It is ideal for projects involving access controls, user policies, or customer-facing processes.
Objectives:
By the end of this course, you will be able to:
Understand privacy obligations under GDPR and how these affect data handling and user trust.
Identify common human threats, including negligence and social engineering
Describe the personas and tactics used by threat actors to exploit human vulnerabilities
Explain the key steps for managing identity and access: identifying users, verifying identity, granting only the access they need
Apply the principle of least privilege and design secure access models for business processes
Support cyber awareness and behaviour change as part of secure project delivery
Level: Intermediate
Duration: 2 days
Delivery mode: In person or virtual
Download further details about the Human Factors of Cybersecurity for Change Professionals course.