Blog and publications
Anima People win the award for Recognition in the Women4Cyber 2024 Awards!!!
The team at Anima People are thrilled to have won this prestigious award. Thanks you to all those that have supported us over the years… Thank you for this award and for your hard work [...]
7 TOP TIPS TO EDUCATE YOUR EMPLOYEES ON SOCIAL ENGINEERING
Social engineering is one of the biggest challenges that organisations face in the constantly changing field of cybersecurity. Social Engineering refers to the deceitful methods used to get personal data from people, like credit card [...]
Insider risk mitigation and threat detection tools
What is insider threat? The term ‘insider threat’ is a branch in cyber security that looks at human behaviour. Whilst cyber security protects general networks and companies from data breaches, which are often external, insider [...]
Prioritize security values and integrity in our recruitment processes to prevent losses and protect our businesses
Did you know that according to a Forbes survey, external theft accounted for 37% of retailer's shrink, followed by employee or internal theft at 28.5%, and process or control failures at 25.7%. CNBC reports that [...]
A gaping hole the size of an ultra-massive black hole exists between ‘awareness’ and ‘insider threat’
The discourse from sellers and resellers, and ‘experts’ on awareness, how to do it well and how to balls it up, insider threat, whether we should care or not, and, the new buzz term ‘human [...]
Cybersecurity Awareness: A Market for Lemons
Anyone who has ever felt like the hours they put in didn’t equate to the value received may understand the impact this can have on motivation to carry out the job. Ambition and determination or [...]
You can drag a horse to water but you can’t force it to drink…
Building a Cybersecurity and Privacy Learning Program: NIST Releases Draft SP 800-50 Rev. 1 I was recently asked to review and provide feedback for a new draft NIST document - Building a Cybersecurity and Privacy Learning Program: [...]
The Elephant in the Room: Security Culture Goes Beyond Compliance
Compliance—the adherence to security standards and processes—is a common sight in the cybersecurity industry. For example, organisations implement the National Institute of Standards and Technology (NIST) framework and the International Organisation for Standardisation (ISO) 270001 [...]
What is socio-technical security and why should we care?
Socio-technical security is an approach to cybersecurity and information security that recognizes the interplay between social and technical elements in safeguarding systems, networks, and data. It acknowledges that security is not solely a technological [...]
Essential Metrics for Managing Human Risk in Security: A Guide for Chief Information Security Officers
As Chief Information Security Officers (CISOs), the responsibility of protecting your organisation from security threats falls heavily on your shoulders. While technological safeguards play a crucial role, the human impact in security can have a [...]