Human Security¶

Cyber Resilience vs Security¶

Cyber resilience means being able to keep going and recover quickly even when cyberattacks or failures happen.

Security or protection is more about trying to stop bad things from happening in the first place.

The difference: security is prevention, resilience is bouncing back when prevention isn’t enough.

Regular backups — if systems are hit, you can restore quickly.

Complacency — people assume “it won’t happen to us” and skip preparation.

Because humans make mistakes (clicking phishing links, weak passwords), resilience ensures those mistakes don’t completely cripple the organization.

Reporting suspicious emails instead of ignoring them.

Using strong passwords and multi‑factor authentication.

Following update policies — keeping software patched.

Responsibility: “My actions matter.”

Trust: “We’re all in this together.”

Awareness: “Threats are real and constant.”

Leadership modeling — managers follow the rules too.

Reward systems — praise or incentives for good practices.

Clear consequences — accountability when rules are ignored.

Why: AI can generate convincing but false info.

Example: An employee asks ChatGPT for “latest compliance rules” and gets outdated or wrong laws.

Behavior to minimize risk: Verify with trusted sources before acting.

Mechanism: Training programs that stress fact‑checking and critical thinking.

Why: Users may paste sensitive company data into AI tools.

Example: Copying customer records into ChatGPT to “summarize,” which exposes private info.

Behavior to minimize risk: Avoid sharing sensitive data with external tools.

Mechanism: Governance policies — clear rules and monitoring on what can/can’t be shared.