Kevin Henry on Cybersecurity: The Human Element of Risk

In the world of information security, it’s common to hear that people are the weakest link. But what if we're looking at the problem incorrectly? A more effective approach is to see your team not as a liability, but as your most critical security asset. The key is to empower them with the right knowledge and support.

This people-centric philosophy is championed by Kevin Henry, an instructor who has likely trained more IT security professionals than anyone else on the globe. As the former co-chair of the ISC2 CISSP CBK, he offers a unique perspective on what truly works in security education and how to build a successful career path. His insights move beyond technical fixes to focus on the human element.

Learn more about Kevin here

The Security Leader’s Role: Advisor, Not Enforcer

As security professionals, our influence is significant. A humble and careful approach is essential, as missteps can carry substantial risk. Our focus must be on delivering tangible value to everyone we work with, from leadership and regulators to suppliers and colleagues.

This requires an awareness of the personal challenges people face. In times of uncertainty, employees are often worried about their job security, finances, and personal well-being. An effective security leader acts as a supportive advisor, not a strict enforcer. Gently remind employees of policies by explaining that the goal is to protect them and the organization, not to catch them making a mistake.

Why Investing in People Is a Core Security Strategy

Now, more than ever, the most critical investment an organization can make is in its people. Business momentum will eventually return, and companies that neglect their workforce during slower periods will inevitably fall behind in the race for digital transformation.

Moreover, training offers rewards that transcend a simple balance sheet. It builds loyalty and capability. When you give people a chance to develop new skills, you demonstrate trust and provide them with an opportunity to meet and exceed expectations. This requires patience, motivation, and persistence from leadership, but the payoff is a more resilient and secure organization.

Ultimately, training is about encouraging people to expand their horizons and realize their full potential. The true impact of a security leader may not be measured in wealth, but in the knowledge that you empowered others and built a culture of trust and competence.

Deepen Your Expertise with an Industry Authority

You are invited to join a live virtual learning experience and gain direct access to insights and innovation from one of the industry's true authorities. These focused one-day masterclasses with Kevin Henry drills down into key security certifications.

Explore the courses and book your spot using the links below:

Security - with Kevin Henry

Live Virtual Masterclass: CISSP Overview

Live Virtual Masterclass: CCSP Overview

Live Virtual Masterclass: CISA Overview

Live Virtual Masterclass: CISM Overview

Attend individually or bring your team to strengthen your organization's security posture with a tangible impact. Don't wait too long to book your place—seats for this unique experience are extremely limited.