The Relationship between Human Talent Management and Cyber Risk

Human Resources is often seen as an area removed from cybersecurity, but in practice it directly manages several of the decisions that most influence an organization's cyber risk: who gets hired, what information they're entrusted with from day one, and when and how that access is withdrawn when they leave. A hiring process without proper verification can bring someone with malicious intentions into a sensitive role, while a slow offboarding process can leave a disgruntled former employee's account active. Recognizing this relationship lets HR stop seeing security as a purely technical issue and start incorporating simple controls, such as timely coordination with IT, into its own usual people management processes.