The challenge

Cybersecurity has entered a new era – one where people, not just systems, are the primary attack surface.

For KnowBe4, the challenge was to demonstrate how human risk is evolving, and why traditional approaches to security awareness are no longer enough. With AI accelerating both threats and workplace complexity, organisations need a new model for managing risk.

The approach

Arlington Research conducted a global study of 700 cybersecurity leaders and 3,500 employees across 14 countries

The research explored:

• The scale and drivers of human-related security incidents
• Employee behaviour, attitudes and accountability
• The growing impact of AI on cybersecurity risk
• The maturity of Human Risk Management (HRM) strategies

The insight 

The findings revealed a fundamental shift: human risk is not only persistent, it’s accelerating.

• 90% of leaders report an increase in human-related incidents
• 57% reported an increase in email-related attacks
• Only 16% have a well-established Human Risk Management programme
• Just 29% have strong visibility into human risk

At the same time, AI is reshaping the threat landscape:

• 43% increase in incidents linked to AI applications
• AI threats are now the top concern for cybersecurity leaders

The outcome

This research helped KnowBe4 define and articulate Human Risk Management (HRM)

A proactive, data-driven approach that:

• Measures individual risk at employee level
• Uses real-time coaching and behavioural insights
• Extends security beyond systems to people and AI agents

This reframed security from reactive defence to continuous behavioural risk management.

The impact

The research enabled KnowBe4 to:

• Lead the global conversation on human-centric cybersecurity
• Clearly define the gap between awareness and action
• Position HRM as the next evolution of security strategy
• Demonstrate urgency around AI-driven risk

By redefining security around people, not just technology, KnowBe4 is helping organisations build a stronger, smarter human defence layer.

Download the report