Enhancing organisational cyber security resilience: A human-centric approach

This paper discusses how to build an effective ‘human firewall’ and foster cyber awareness within organisations. The paper moves beyond traditional technical safeguards and emphasises the indispensable role of human behaviour, decision making and organisational culture in cyber security. It highlights the ineffectiveness of one-off compliance training and advocates for continuous, adaptive, psychologically informed strategies such as gamification, nudging and storytelling. The paper underscores the critical influence of leadership, accountability and psychological safety in cultivating a resilient security posture. Practical recommendations are provided for integrating behavioural science into training programmes, establishing clear accountability and utilising exercises such as tabletop simulations to translate knowledge into actionable defence mechanisms, ultimately transforming the human element from a potential vulnerability into a formidable asset. This article is also included in The Business & Management Collection which can be accessed at https://hstalks.com/business/.