Instead of applying more training or reacting to incidents, human risk management seeks to understand the root causes and works to establish the technology, policies, culture and behavior change needed to prevent them from happening again. We’ll discuss how CISOs should leverage available data for meaningful people-metrics, and how to use this visibility to apply protection where it is most needed.