When it comes to cyber security people are often the weakest link in any organization. To build a robust cyber defence and minimize your attack surface, prioritizing people is essential.There are three types of individuals within an organization:The Majority: These individuals inherently want to contribute positively to protecting the business. When provided with the right skills and opportunities, they step up.The Minority: For various reasons, some individuals do not engage as effectively. They need to be identified and given extra support to improve.High-Risk Individuals: Though rare, some individuals may become high-risk due to malicious intent, often triggered by changing business circumstances, such as retrenchments or mergers. These individuals need to be identified and managed appropriately.Drawing from my extensive experience in Human Capital Management and the defence sector, where we helped organizations comply with certifications like DISP, ITAR, CMMC, NIST, and ISO 27001, we have developed a solution through our partners to address these three types of individuals. This approach will foster a positive cyber culture and mitigate risky employee behaviour.Our business has evolved to partner with innovative technology leaders, delivering services that focus on changing behaviour to help employees become the first line of cyber defence and safeguarding sensitive data.